← All credits
Jack Pas
17 vulnerability records and advisories credit this contributor.
CVE-2025-9085
User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
CVE-2025-8897
Beaver Builder Plugin (Lite Version) <= 2.9.2.1 - Reflected Cross-Site Scripting
CVE-2025-8490
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
CVE-2026-3533
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
CVE-2026-3226
LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering
CVE-2025-11517
Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass
CVE-2025-12177
Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key