sermsak
5 credited records · 5 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2026-104799No exploit | Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parametersrnlab · mobile builder · CWE-269 | High8.8 | — | 0.3% | 6 days ago |
26Monitor | CVE-2026-115820No exploit | Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameterahmadmj · majestic support – the leading-edge help desk & customer support plugin · CWE-89 | Medium6.5 | — | 0.4% | Oct 30, 2026 |
39Monitor | CVE-2026-109218No exploit | Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypasskleor · contact manager · CWE-434 | Critical9.8 | — | 0.6% | Oct 28, 2026 |
25Monitor | CVE-2026-97020No exploit | PO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameterdougwollison · po/mo editor · CWE-79 | Medium6.4 | — | 0.2% | Oct 14, 2026 |
30Monitor | CVE-2026-77193No exploit | eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parametereesywp · eesy_id2wp – publish indesign html5 · CWE-22 | High7.5 | — | 0.3% | Sep 24, 2026 |
- CVE-2026-10479935Monitor
Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters
HighCVSS 8.8No exploitEPSS 0%rnlab · mobile builder6 days ago
- CVE-2026-11582026Monitor
Majestic Support <= 1.2.2 - Authenticated (Subscriber+) SQL Injection via 'columns' Parameter
MediumCVSS 6.5No exploitEPSS 0%ahmadmj · majestic support – the leading-edge help desk & customer support pluginOct 30, 2026
- CVE-2026-10921839Monitor
Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
CriticalCVSS 9.8No exploitEPSS 0%kleor · contact managerOct 28, 2026
- CVE-2026-9702025Monitor
PO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameter
MediumCVSS 6.4No exploitEPSS 0%dougwollison · po/mo editorOct 14, 2026
- CVE-2026-7719330Monitor
eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parameter
HighCVSS 7.5No exploitEPSS 0%eesywp · eesy_id2wp – publish indesign html5Sep 24, 2026