CVEs we hold for Michael

Records whose assigning authority named Michael as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-90835michaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scriptingmichaelliao itranswarp

CVE-2026-77220PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formattingmichaelrsweet pdfio

CVE-2025-9882osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingmichaelbo osTicket WP Bridge

CVE-2025-54740WordPress Print My Blog Plugin <= 3.27.9 - Cross Site Scripting (XSS) VulnerabilityMichael Nelson Print My Blog

CVE-2025-48146WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerabilityMichael Lups SEO Flow by LupsOnline

CVE-2025-47542WordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) VulnerabilityMichael Simple calendar for Elementor

CVE-2025-46481WordPress Flickr Shortcode Importer plugin <= 2.2.3 - PHP Object Injection VulnerabilityMichael Cannon Flickr Shortcode Importer

CVE-2025-46249WordPress Simple calendar for Elementor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) VulnerabilityMichael Simple calendar for Elementor

CVE-2025-46225WordPress Post in page for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityMichael Post in page for Elementor

CVE-2025-30946WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) VulnerabilityMichael Cannon Custom Bulk/Quick Edit

CVE-2025-24682WordPress Super Block Slider plugin <= 2.7.9 - Broken Access Control vulnerabilityMichael Super Block Slider

CVE-2025-23490WordPress Browser-Update-Notify plugin <= 0.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityMichael Stursberg Browser-Update-Notify

CVE-2025-13856Extra Post Images <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesmichaelcole1991 Extra Post Images

CVE-2025-12186Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scriptingmichael_j_reid Weekly Planner

CVE-2025-10128Eulerpool Research Systems <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingmichaellow Eulerpool Research Systems

CVE-2024-9346Embed videos and respect privacy <= 1.2 - Reflected Cross-Site Scriptingmichaelzangl Embed videos and respect privacy

CVE-2024-51846WordPress Community Yard Sale plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerabilityMichael Simpson Community Yard Sale

CVE-2024-51712WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityMichael Visser Jigoshop – Store Toolkit

CVE-2024-51685WordPress Accordion title for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilityMichael Gangolf Accordion title for Elementor

CVE-2024-51683WordPress Custom post type templates for Elementor plugin <= 1.10.1 - Stored Cross Site Scripting (XSS) vulnerabilityMichael Custom post type templates for Elementor

CVE-2024-49676WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerabilityMichael Bourne Custom Icons for Elementor

CVE-2024-43964WordPress DSGVO All in one for WP plugin <= 4.5 - Cross Site Scripting (XSS) vulnerabilityMichael Leithold DSGVO All in one for WP

CVE-2024-42358Loop with Unreachable Exit Condition ('Infinite Loop') in pdfiomichaelrsweet pdfio

CVE-2024-37271WordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerabilityMichael Nelson Print My Blog

CVE-2024-37221WordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerabilityMichael Bester Kimili Flash Embed

CVE-2024-33907WordPress Print My Blog plugin <= 3.26.2 - Broken Access Control vulnerabilityMichael Nelson Print My Blog

CVE-2024-32133WordPress EZ Form Calculator plugin <= 2.14.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityMichael Schuppenies EZ Form Calculator

CVE-2024-32092WordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityMichael Bester Kimili Flash Embed

CVE-2024-32079WordPress Advanced iFrame plugin <= 2024.2 - Cross Site Scripting (XSS) vulnerabilityMichael Dempfle Advanced iFrame

CVE-2024-30558WordPress Add Shortcodes Actions And Filters plugin <= 2.10 - Reflected Cross Site Scripting (XSS) vulnerabilityMichael Simpson Add Shortcodes Actions And Filters

CVE-2024-27967WordPress DSGVO All in one for WP plugin <= 4.3 - Cross Site Request Forgery (CSRF) vulnerabilityMichael Leithold DSGVO All in one for WP

CVE-2024-24870WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)Michael Dempfle Advanced iFrame

CVE-2024-22282WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)Michael Torbert SimpleMap Store Locator

CVE-2023-52175WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)Michael Uno (miunosoft) Auto Amazon Links – Amazon…

CVE-2023-52129WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)Michael Winkler teachPress

CVE-2023-49289Cross-site Scripting in Ajax.NET Professionalmichaelschwarz Ajax.NET-Professional

CVE-2023-49163WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF)Michael Winkler teachPress

CVE-2023-48755WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)Michael Winkler teachPress

CVE-2023-47520WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)Michael Uno (miunosoft) Responsive Column Widgets

CVE-2023-46072WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Scripting (XSS)Michael Simpson Add Shortcodes Actions And Filters

CVE-2023-45762WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open RedirectionMichael Uno (miunosoft) Responsive Column Widgets

CVE-2023-45073WordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)Michael Koch Mendeley Plugin

CVE-2023-44475WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)Michael Simpson Add Shortcodes Actions And Filters

CVE-2023-44473WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)Michael Tran Table of Contents Plus

CVE-2023-36688WordPress Simple Site Verify Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)Michael Mann Simple Site Verify

CVE-2023-36501WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)Michael Winkler teachPress

CVE-2023-28428PDFio vulnerable to Denial Of Service when opening a corrupt PDF filemichaelrsweet pdfio

CVE-2023-25452WordPress CMS Press Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)Michael Pretty (prettyboymp) CMS Press

CVE-2023-24808Denial Of Service when opening a corrupt PDF file in pdfiomichaelrsweet pdfio

CVE-2023-23864WordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)Michael Aronoff Very Simple Google Maps

CVE-2023-22704WordPress teachPress Plugin <= 8.1.8 is vulnerable to Cross Site Scripting (XSS)Michael Winkler teachPress

CVE-2022-37342WordPress Add Shortcodes Actions And Filters plugin <= 2.0.9 - Authenticated Stored Cross-Site Scripting (XSS)…Michael Simpson Add Shortcodes Actions And Filters…

CVE-2022-0137no title heldmichaelrsweet htmldoc

CVE-2021-43853Cross-Site Scripting in AjaxNetProfessionalmichaelschwarz Ajax.NET-Professional

CVE-2021-24294DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)Michael Leithold DSGVO All in one for WP

CVE-2020-11073Remote Code Execution in Autoswitch Python VirtualenvMichaelAquilina zsh-autoswitch-virtualenv

CVE-2010-10006michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancymichaelliao jopenid

57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.