← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
CVE-2024-13924
Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery
CVE-2024-13845
Gravity Forms WebHooks <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
CVE-2024-1376
Event post <= 5.9.4 - Missing Authorization
CVE-2024-9178
XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-12103
Content No Cache: prevent specific content from being cached <= 0.1.2 - Unauthenticated Private Content Disclosure
CVE-2024-1089
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn
CVE-2024-5649
Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-8914
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-0830
Comments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery