← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-1688
Woo Total Sales <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
CVE-2024-7656
Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection
CVE-2024-13410
CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler
CVE-2024-1634
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
CVE-2024-12824
Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
CVE-2024-5997
Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation
CVE-2024-1079
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
CVE-2024-1855
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
CVE-2024-3664
Quick Featured Images <= 13.7.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting