← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2023-5132
Soisy Pagamento Rateale <= 6.0.1 - Missing Authorization to Sensitive Information Exposure
CVE-2024-1859
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-0516
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
CVE-2024-1050
Import and export users and customers <= 1.26.5 - Missing Authorization
CVE-2024-0377
LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review
CVE-2024-4371
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection
CVE-2024-11496
Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update
CVE-2024-9115
Common Tools for Site <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10692
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.8.1 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10629
GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation