← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-1895
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
CVE-2024-9578
Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
CVE-2023-6695
Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
CVE-2024-13890
Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection
CVE-2024-0620
PPWP – Password Protect Pages <= 1.8.9 - Protection Mechanism Bypass
CVE-2024-7419
WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
CVE-2024-2308
ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10040
Infinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2024-12721
Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection
CVE-2024-9068
OneElements – Best Elementor Addons <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload