Mor Golan

CVEs by Mor Golan

10 published CVEs, each crediting me by name in the official CVE record. Search them on cve.org or on the Patchstack researcher profile.

  1. CVE-2026-122675 Medium 5.4

    Cross Site Request Forgery (CSRF) in Wp Social

    WordPress plugin · versions ≤ 3.2.3 · fixed in 3.2.4 · · Advisory · Writeup

  2. CVE-2026-39732 Critical 9.3

    SQL Injection in Transliterator

    WordPress plugin · versions ≤ 2.5.13 · fixed in 2.5.14 · · Advisory · Writeup

  3. CVE-2026-61989 High 7.1

    Cross Site Scripting (XSS) in Easy Property Listings

    WordPress plugin · versions ≤ 3.5.25 · fixed in 3.5.26 · · Advisory · Writeup

  4. CVE-2026-115596 High 7.1

    Cross Site Scripting (XSS) in eCommerce Product Catalog

    WordPress plugin · versions ≤ 3.6.4 · fixed in 3.6.5 · · Advisory · Writeup

  5. CVE-2026-112869 High 7.1

    Cross Site Scripting (XSS) in We’re Open!

    WordPress plugin · versions ≤ 2.6 · fixed in 2.7 · · Advisory · Writeup

  6. CVE-2026-112222 Medium 5.4

    Broken Access Control in Surfer

    WordPress plugin · versions ≤ 1.8.0.744 · fixed in 1.8.1.759 · · Advisory · Writeup

  7. CVE-2026-95597 Medium 6.5

    Settings Change in 워드프레스 결제 심플페이

    WordPress plugin · versions ≤ 5.5.17 · fixed in 5.5.18 · · Advisory · Writeup

  8. CVE-2026-94641 High 7.1

    Cross Site Scripting (XSS) in UsersWP

    WordPress plugin · versions ≤ 1.2.73 · fixed in 1.2.74 · · Advisory · Writeup

  9. CVE-2026-96838 High 8.8

    Cross Site Request Forgery (CSRF) in Blacklist Manager for WooCommerce

    WordPress plugin · versions ≤ 2.3.1 · fixed in 2.3.2 · · Advisory · Writeup

  10. CVE-2026-94074 Medium 6.5

    Broken Access Control in Simply Schedule Appointments

    WordPress plugin · versions ≤ 1.6.12.29 · fixed in 1.6.12.31 · · Advisory · Writeup