← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-5161
Magical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4398
HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
CVE-2024-5073
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
CVE-2024-2123
Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-4370
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget
CVE-2024-4036
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-0433
Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7144
JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5162
WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter