← All credits
Joshua Chan (Patchstack Alliance)
118 vulnerability records and advisories credit this contributor.
CVE-2024-38760
WordPress Send Users Email plugin <= 1.5.1 - Sensitive Data Exposure vulnerability
CVE-2024-38761
WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability
CVE-2024-38747
WordPress HitPay Payment Gateway for WooCommerce plugin <= 4.1.3 - Sensitive Data Exposure via Log File vulnerability
CVE-2024-38742
WordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
CVE-2024-38741
WordPress Amazing Hover Effects plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38719
WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability
CVE-2024-38699
WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability
CVE-2024-37959
WordPress Power BI Embedded for WordPress plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37958
WordPress Meks Smart Author Widget plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37553
WordPress Testimonials Widget plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability