← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-9872
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-4710
Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
CVE-2024-5456
Panda Video <= 1.4.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-8878
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-6545
Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure
CVE-2024-5457
Panda Video <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3560
LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4668
Gum Elementor Addon <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price Table and Post Slider Widgets
CVE-2024-10872
Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1985
Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting