← All credits
Chloe Chamberland
97 vulnerability records and advisories credit this contributor.
CVE-2025-1307
Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-11150
WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
CVE-2021-4332
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
CVE-2021-4450
Post Grid <= 2.1.12 - Contributor+ SQL Injection
CVE-2023-0038
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2022-4940
WCFM Membership <= 2.10.0 - Missing Authorization
CVE-2020-36669
JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
CVE-2021-4331
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
CVE-2023-1874
WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation