← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-4706
WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode
CVE-2024-4862
WPBITS Addons For Elementor Page Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-7368
Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure
CVE-2024-2198
Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address
CVE-2024-13539
AForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure
CVE-2024-0591
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.
CVE-2024-5259
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
CVE-2024-10873
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-6570
Glossary <= 2.2.26 - Unauthenticated Full Path Disclosure
CVE-2024-4135
WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution