Wordfence Intelligence > Vulnerability Researchers > suyoung kim(AhnLab)

suyoung kim(AhnLab)

Organization: AhnLab

770

All Time Ranking

All Time Discoveries

90 Day Published Submissions

30 Jun '26

Last Published Submission

About

Security Researcher and Senior Penetration Tester at AhnLab, South Korea's top security firm. Since 2006, I have been committed to the frontline of cybersecurity. I am now focusing on preemptively finding WordPress vulnerabilities to build a secure open-source environment and protect global users.

3 Achievements

Learn more about Achievements

Learn more Learn more about Achievements

4 Vulnerabilities

Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint

7.5

CVE-2026-1239

Jun 30, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion

8.8

CVE-2026-2448

Mar 2, 2026

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute

6.4

CVE-2026-1293

Feb 5, 2026

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

hCaptcha for WP <= 4.22.0 - Missing Authorization

5.3

CVE-2026-25315

Jan 26, 2026

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
Ninja Forms <= 3.14.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via token/refresh REST Endpoint	CVE-2026-1239	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	June 30, 2026
Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion	CVE-2026-2448	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	March 2, 2026
Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute	CVE-2026-1293	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	February 5, 2026
hCaptcha for WP <= 4.22.0 - Missing Authorization	CVE-2026-25315	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	January 26, 2026

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation