← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-13889
WordPress Importer <= 0.8.3 - Authenticated (Administrator+) PHP Object Injection
CVE-2024-10586
Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
CVE-2024-1338
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in stopOptimizeAll
CVE-2024-10690
Shortcodes for Elementor <= 1.0.4 - Authenticated (Contributor+) Post Disclosure
CVE-2024-8288
Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
CVE-2023-6810
ClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings
CVE-2024-8108
Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
CVE-2024-4471
140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-11118
404 Error Monitor <= 1.1 - Cross-Site Request Forgery to Plugin Settings Update via updatePluginSettings Function
CVE-2024-1678
Subway – Private Site Option <= 2.1.4 - Improper Access Control to Sensitive Information Exposure via REST API