← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-6987
Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
CVE-2024-6591
Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation
CVE-2024-13812
Anps Theme plugin <= 1.1.1 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-1758
SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
CVE-2024-2368
Mollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post Duplication
CVE-2024-12827
DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset
CVE-2024-13811
Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
CVE-2024-5856
Comment Images Reloaded <= 2.2.1 - Authenticated (Subscriber+) Arbitrary Media Deletion
CVE-2024-7381
Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
CVE-2023-6600
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 5.7.9 - Missing Authorization to Unauthenticated Directory Deletion and Cross-Site Scripting