Ryan Kozak

Hacking, CVEs, Development, and Other Things.

About Me
Recent
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure
AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload
CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read

© 2025 . All rights reserved.

WP Directory Kit

2025

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover December 2, 2025