← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-9267
Easy WordPress Subscribe – Optin Hound <= 1.4.3 - Reflected Cross-Site Scripting via add_query_arg Parameter
CVE-2023-6694
Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
CVE-2024-0836
WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update
CVE-2024-13899
Mambo Importer <= 1.0 - Authenticated (Administrator+) PHP Object Injection
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
CVE-2024-9661
WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion
CVE-2024-0702
Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.1 - Missing Authorization
CVE-2024-5925
Theron Lite <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
CVE-2024-1335
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist