← All credits
Francesco Carlucci
564 vulnerability records and advisories credit this contributor.
CVE-2024-2131
Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10323
JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-1562
WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization
CVE-2023-6701
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
CVE-2024-0373
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view
CVE-2024-11291
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
CVE-2023-6996
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection
CVE-2024-10084
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
CVE-2024-7486
MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection