Ryan Kozak

Hacking, CVEs, Development, and Other Things.

About Me
Recent
WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload
Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.4.0 - Authenticated (Subscriber+) Arbitrary File Upload
StoreEngine Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.4.0 - Authenticated (Subscriber+) Arbitrary File Download

WPBookit

WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting November 20, 2025