← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-6167
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions
CVE-2024-0910
Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
CVE-2023-6968
The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions
CVE-2024-0791
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization
CVE-2024-2256
oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9269
Relogo <= 0.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-5342
Simple Image Popup Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-11282
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-1176
HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update