← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-0870
YITH WooCommerce Gift Cards <= 4.12.0 - Missing Authorization to Unauthenticated WooCommerce Settings Update
CVE-2024-1325
Live Sales Notification for Woocommerce – Woomotiv <= 3.4.3 - Cross-Site Request Forgery via ajax_cancel_review
CVE-2024-7434
UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-7425
WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
CVE-2024-2349
Fancy Elementor Flipbox <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget
CVE-2024-0428
Index Now <= 2.6.3 - Cross-Site Request Forgery via reset_form
CVE-2024-9189
EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization
CVE-2024-4567
Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
CVE-2024-1649
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory