← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-10671
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
CVE-2023-6744
Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-0766
Envo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request
CVE-2023-7049
Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode
CVE-2024-1230
SimpleShop <= 2.10.0 - Cross-Site Request Forgery
CVE-2023-5205
Add Custom Body Class <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0978
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
CVE-2024-10790
Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG
CVE-2024-1375
Event post <= 5.9.10 - Cross-Site Request Forgery
CVE-2024-11089
Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure