I ship native, mobile, and web products, and I take apart other people's.
korsund.com · X · App Store · Google Play
| CVE | Product | Issue | CVSS |
|---|---|---|---|
| CVE-2026-7458 | User Verification | Authentication bypass | 9.8 |
| CVE-2026-57739 | AcyMailing | Blind SQL injection | 9.3 |
| CVE-2026-42747 | Easy Form Builder | Blind SQL injection | 9.3 |
| CVE-2026-7465 | Spectra Gutenberg Blocks | Remote code execution | 8.8 |
| CVE-2026-45490 | Microsoft .NET SDK | Elevation of privilege | 7.8 |
| CVE-2026-62871 | Microsoft .NET WPF | Heap overflow, elevation of privilege | 7.8 |
| CVE-2026-62886 | Microsoft .NET Desktop Runtime | Integer overflow, elevation of privilege | 7.8 |
| CVE-2026-91811 | Foxit PDF Reader | Out-of-bounds write, code execution | 7.8 |
12 more
| CVE | Product | Issue | CVSS |
|---|---|---|---|
| CVE-2026-48874 | GamiPress | SQL injection | 8.5 |
| CVE-2026-3453 | ProfilePress | Subscription IDOR | 8.1 |
| CVE-2026-3629 | Import and export users | Privilege escalation | 8.1 |
| CVE-2026-49112 | Shared Files | Path traversal | 7.5 |
| CVE-2026-3454 | GenerateBlocks | Sensitive data exposure | 6.5 |
| CVE-2026-48965 | XCloner | Sensitive data exposure | 6.5 |
| CVE-2026-3722 | Auto Image Attributes | Stored XSS | 6.4 |
| CVE-2026-3361 | WP Store Locator | Stored XSS | 6.4 |
| CVE-2026-3369 | Better Find and Replace | Stored XSS | 5.4 |
| CVE-2026-4664 | Customer Reviews for WooCommerce | Authentication bypass | 5.3 |
| CVE-2026-91788 | Foxit PDF Reader | Information disclosure | 4.7 |
| CVE-2026-69904 | Microsoft SharePoint | SSRF, information disclosure | 3.5 |
More in coordinated disclosure.
Korva: offline Microsoft Publisher alternative
Trade Buddy: trading journal with AI coaching
Rust · Swift · Flutter · TypeScript · Go