← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2024-8436
WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection
CVE-2024-2384
WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure
CVE-2024-1382
Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion
CVE-2024-5987
WP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
CVE-2024-6590
Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2023-6963
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
CVE-2024-1126
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
CVE-2024-12711
RSVP and Event Management <= 2.7.13 - Missing Authorization
CVE-2024-7857
Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection
CVE-2024-11926
Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions