← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-3627
Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints
CVE-2024-3602
Pop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer <= 1.1.0 - Missing Authorization
CVE-2024-6175
Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
CVE-2024-1503
Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase
CVE-2024-5459
Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation
CVE-2024-1945
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
CVE-2024-4450
AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions
CVE-2025-0951
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated