← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-2254
RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
CVE-2024-11290
Member Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-0515
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare
CVE-2024-11409
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
CVE-2023-6630
Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference
CVE-2024-0681
Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass
CVE-2024-0631
Duitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response
CVE-2024-10688
Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure
CVE-2024-5937
Simple Alert Boxes <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Shortcode
CVE-2024-2289
PowerPack Lite for Beaver Builder <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via element link