← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-12059
ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization to Arbitrary Options Read
CVE-2024-2082
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13857
WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery
CVE-2024-0984
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization
CVE-2024-13833
Album Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta
CVE-2024-0829
Comments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization
CVE-2024-8921
Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-0369
Bulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles
CVE-2024-2350
Clever Addons for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets
CVE-2024-1336
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn