← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-1710
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-6180
EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
CVE-2024-4788
Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation
CVE-2024-0256
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
CVE-2024-3268
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation
CVE-2024-1641
Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication
CVE-2024-1810
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
CVE-2024-13776
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
CVE-2024-5479
Easy Pixels by JEVNET <= 2.13 - Unauthenticated Stored Cross-Site Scripting