← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-9118
QS Dark Mode Plugin <= 2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-2141
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
CVE-2024-9388
Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-11083
ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1731
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-9065
WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test