← All credits

afei

3 vulnerability records and advisories credit this contributor.

CVE-2026-103423

Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'

Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting