← All credits
LVT-tholv2k (Patchstack Alliance)
182 vulnerability records and advisories credit this contributor.
CVE-2024-37460
WordPress SuperSaaS – online appointment scheduling plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37445
WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37247
WordPress jQuery T(-) Countdown Widget plugin <= 2.3.25 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37223
WordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37225
WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability
CVE-2024-37226
WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerability
CVE-2024-37231
WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability
CVE-2024-37221
WordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37217
WordPress Empty Cart Button for WooCommerce plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37216
WordPress Sketchfab Embed plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability