← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2025-9217
Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
CVE-2025-11241
Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10249
Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read
CVE-2025-9344
UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-6990
Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution
CVE-2025-6988
Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11755
Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2025-11129
Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'
CVE-2025-6251
Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-8902
Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting