← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-12876
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
CVE-2023-6731
WP Show Posts <= 1.1.5 - Improper Authorization to Information Exposure
CVE-2024-12204
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization
CVE-2024-13815
Listingo - Business Listing and Directory WordPress Theme <= 3.2.7 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-1136
Coming Soon Page & Maintenance Mode <= 2.2.1 - Maintenance Mode Bypass
CVE-2024-13773
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure
CVE-2024-6458
WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scripting
CVE-2024-1716
Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2024-1943
Yuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset
CVE-2024-12613
Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection