← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-8964
Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1095
Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization
CVE-2024-1478
Maintenance Mode <= 3.0.1 - Information Exposure
CVE-2024-8920
Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-0374
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_view
CVE-2024-0452
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback
CVE-2024-9069
Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-12600
Custom Product Tabs Lite for WooCommerce <= 1.9.0 - Authenticated (Shop Manager+) PHP Object Injection
CVE-2024-2136
WPKoi Templates for Elementor <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget
CVE-2024-0975
WordPress Access Control <= 4.0.13 - Improper Access Control to Sensitive Information Exposure via REST API