← All credits
Colin Xu
94 vulnerability records and advisories credit this contributor.
CVE-2024-13473
LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
CVE-2024-13711
Pollin <= 1.01.1 - Reflected Cross-Site Scripting
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2023-6805
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
CVE-2024-11435
salavat counter Plugin <= 0.9.4 - Reflected Cross-Site Scripting
CVE-2024-13489
LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection
CVE-2024-5852
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
CVE-2024-5945
WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
CVE-2024-10049
Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page
CVE-2024-9217
Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting