← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-0872
Watu Quiz <= 3.4.1 - Sensitive Information Disclosure
CVE-2024-7827
Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter
CVE-2025-0939
MagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorization
CVE-2024-1322
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
CVE-2024-5768
MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5859
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
CVE-2024-5992
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update
CVE-2024-1109
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export
CVE-2024-13809
Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection
CVE-2024-1362
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh