← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-3555
Social Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting
CVE-2024-1637
360 Javascript Viewer <= 1.7.12 - Missing Authorization to Plugin Settings Update
CVE-2024-10532
Bard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
CVE-2024-3663
WP Scraper <= 5.7 - Missing Authorization to Arbitrary Page/Post Creation
CVE-2023-7065
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process
CVE-2024-1158
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization
CVE-2024-1690
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export
CVE-2024-13779
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting
CVE-2024-1318
RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication
CVE-2024-13780
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion