← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-9368
Aggregator Advanced Settings <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-5724
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-1108
Plugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of Service
CVE-2024-5938
Boot Store <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode
CVE-2023-6325
RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate
CVE-2024-0899
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information Exposure
CVE-2024-13856
Make Builder <= 1.1.10 - Authenticated (Subscriber+) Server-Side Request Forgery via make_builder_ajax_subscribe Function
CVE-2023-6748
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
CVE-2024-8478
Affiliate Super Assistent <= 1.5.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-5964
Zenon Lite <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode