← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2025-0450
Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2025-6745
WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
CVE-2024-3675
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
CVE-2024-4329
Thim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7414
PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
CVE-2024-4564
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-4865
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
CVE-2024-6447
FULL <= 3.1.12 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter
CVE-2024-10960
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
CVE-2024-7426
Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure