← All credits
Dimas Maulana (Patchstack Alliance)
91 vulnerability records and advisories credit this contributor.
CVE-2024-25928
WordPress Sitepact's Contact Form 7 Extension For Klaviyo Plugin <= 1.0.5 is vulnerable to SQL Injection
CVE-2024-25927
WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection
CVE-2024-25926
WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-24933
WordPress Honeypot for WP Comment Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-24881
WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-24877
WordPress Wonder Slider Lite Plugin <= 13.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-24847
WordPress CalculatorPro Calculators Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-22286
WordPress BA Plus Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-22287
WordPress Better Anchor Links Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-22285
WordPress Frontpage Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)