← All credits
Chloe Chamberland
97 vulnerability records and advisories credit this contributor.
CVE-2026-12136
SysBasics Customize My Account for WooCommerce <= 4.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-12165
Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter
CVE-2026-8181
Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover
CVE-2023-2066
Announcement & Notification Banner – Bulletin <= 3.6.0 - Missing Authorization Checks
CVE-2025-3437
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
CVE-2023-0958
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
CVE-2023-3295
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2023-0558
ContentStudio <= 1.2.5 - Authorization Bypass
CVE-2021-4447
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
CVE-2023-2067
Announcement & Notification Banner – Bulletin <= 3.7.0 - Cross-Site Request Forgery