← All credits
Elliot (Patchstack Alliance)
26 vulnerability records and advisories credit this contributor.
CVE-2024-2906
WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability
CVE-2024-24704
WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability
CVE-2024-22136
WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-51696
WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-49155
WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-49154
WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability
CVE-2023-48768
WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47689
WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability
CVE-2023-47647
WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerability
CVE-2023-47531
WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)