← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-9674
Debrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-9117
Mapplic Lite <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-9361
Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
CVE-2024-0615
Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure
CVE-2024-9304
LocateAndFilter <= 1.6.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-8318
Attributes for Blocks <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributesForBlocks Parameter
CVE-2024-0619
Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update
CVE-2024-2335
Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
CVE-2024-1770
Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection
CVE-2024-9642
Editor Custom Color Palette <= 3.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload