← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-11295
Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-1950
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection
CVE-2024-1324
QQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content Retrieval
CVE-2024-2252
Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2090
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
CVE-2024-10779
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure
CVE-2024-0969
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
CVE-2023-6854
Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
CVE-2024-2280
Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
CVE-2024-0434
WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly <= 1.7.1 - Missing Authorization via ttbm_new_place_save