← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-8432
Appointment & Event Booking Calendar Plugin – Webba Booking <= 5.0.48 - Missing Authorization to Authenticated (Subscriber+) CSS Settings Update
CVE-2024-1361
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
CVE-2024-5489
Wbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion
CVE-2024-5810
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials
CVE-2024-3206
Different Menu in Different Pages – Control Menu Visibility (All in One) <= 2.3.2 - Missing Authorization to Menu Duplication
CVE-2024-13777
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated PHP Object Injection
CVE-2024-1733
Word Replacer Pro <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Content Update
CVE-2024-5704
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2024-12341
Custom Skins Contact Form 7 <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update and Skin Creation
CVE-2024-12253
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access