← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2022-3604
Contact Form Entries < 1.3.0 - CSV Injection
CVE-2022-3393
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
CVE-2022-3463
FluentForm < 4.3.13 - CSV Injection
CVE-2022-3574
WPForms Pro < 1.7.7 - CSV Injection
CVE-2022-3600
Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
CVE-2022-3603
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
CVE-2022-3907
Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure
CVE-2022-3605
WP CSV Exporter < 1.3.7 - CSV Injection
CVE-2023-4040
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.7.9. This makes it possible for una
CVE-2024-9619
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload