← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-11093
SG Helper <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10014
Flat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode
CVE-2024-9060
AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-8479
Simple Spoiler 1.2 - 1.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2021-24872
Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
CVE-2021-24897
Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24871
Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24855
Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24851
Insert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access
CVE-2021-24832
WP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRF