← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2023-6745
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
CVE-2024-0892
Schema App Structured Data <= 2.2.0 - Cross-Site Request Forgery
CVE-2024-10669
Countdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosure
CVE-2023-5537
Delete Usermetas <= 1.1.2 - Cross-Site Request Forgery
CVE-2024-5021
WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
CVE-2024-8760
Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection
CVE-2024-1370
Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure
CVE-2024-4858
Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update
CVE-2024-9503
Maintenance & Coming Soon Redirect Animation <= 2.1.3 - Missing Authorization to Settings Update
CVE-2024-2163
Ninja Beaver Add-ons for Beaver Builder <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets