← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-9025
Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title
CVE-2024-2138
JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
CVE-2024-8962
WPBITS Addons For Elementor Page Builder <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-5870
Tweaker5 <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
CVE-2024-4546
Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode
CVE-2024-0687
Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure
CVE-2024-5869
Neighborly <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
CVE-2024-9366
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1352
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization
CVE-2024-12061
Events Addon for Elementor <= 2.2.3 - Authenticated (Contributor+) Post Disclosure