← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-5993
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
CVE-2024-1843
Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink
CVE-2024-3217
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
CVE-2024-12618
Newsletter2Go <= 4.0.14 - Missing Authorization to Authenticated (Subscriber+) Style Reset
CVE-2024-3520
Country State City Dropdown CF7 <= 2.7.1 - Missing Authorization
CVE-2024-1717
Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
CVE-2024-13419
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-1568
Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
CVE-2025-0956
WooCommerce Recover Abandoned Cart <= 24.4.0 - Unauthenticated PHP Object Injection
CVE-2024-3581
MaxGalleria <= 6.4.2 - Missing Authorization