← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2025-3472
Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-5006
Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter
CVE-2024-4695
Move Addons for Elementor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-6575
The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget
CVE-2024-5024
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
CVE-2024-6565
AForms <= 2.2.6 - Unauthenticated Full Path Disclosure
CVE-2025-7399
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13535
Actionwear products sync <= 2.3.2 - Unauthenticated Full Patch Disclosure
CVE-2024-4707
Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode
CVE-2024-4431
LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter