← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-8915
Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-2459
UX Flat <= 4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6243
EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email
CVE-2024-1418
CGC Maintenance Mode <= 1.2 - Sensitive Information Exposure
CVE-2024-0385
Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory
CVE-2024-8916
Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-0451
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback
CVE-2024-10795
Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10588
Debug Tool <= 2.2 - Missing Authorization to Information Exposure
CVE-2024-11465
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection