← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
CVE-2024-0909
Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass
CVE-2024-9074
Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1090
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll
CVE-2024-12434
SureMembers <= 1.10.6 - Sensitive Information Exposure
CVE-2024-0437
Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
CVE-2024-13905
OneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery
CVE-2024-1130
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
CVE-2024-12099
Dollie Hub – Build Your Own WordPress Cloud Platform <= 6.2.0 - Authenticated (Contributor+) Post Disclosure
CVE-2024-1476
Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure