← All credits
Luca Jungnickel
9 vulnerability records and advisories credit this contributor.
CVE-2026-12042
WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter
CVE-2026-12402
OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting
CVE-2026-14870
Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id
CVE-2026-9577
Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
CVE-2025-15546
Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition
CVE-2026-9570
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
CVE-2026-9278
Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure
CVE-2026-9269
Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter
CVE-2026-8981
Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML