← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-7435
Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-9073
GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-9846
Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-9839
Uix Slideshow <= 1.6.5 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
CVE-2024-2458
Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-8030
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
CVE-2024-5084
Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
CVE-2024-1093
Change Memory Limit <= 1.0 - Missing Authorization via admin_logic()
CVE-2023-6938
Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field