← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-9581
Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-0453
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback
CVE-2024-2693
Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-0431
Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card
CVE-2024-9372
WP Blocks Hub <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-8103
WP Category Dropdown <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
CVE-2024-1566
Redirects <= 1.2.1 - Missing Authorization via save
CVE-2024-9386
Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-4560
Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
CVE-2024-1121
Advanced Forms for ACF <= 1.9.3.2 - Missing Authorization to Unauthenticated Form Settings Export