← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-13940
Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
CVE-2024-10437
WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation
CVE-2024-9373
Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10798
Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure
CVE-2024-9708
Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-8267
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
CVE-2024-11095
Visualmodo Elements <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1473
Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure
CVE-2024-9125
king_IE <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-9172
Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload