← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-7432
Unseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-1477
Easy Maintenance Mode <= 1.4.2 - Information Exposure
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
CVE-2024-11294
Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
CVE-2024-9848
Product Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2023-6897
EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
CVE-2024-10016
File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-0983
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in enableOptimization
CVE-2024-8481
Special Text Boxes <= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution