← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-7382
Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
CVE-2024-6548
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
CVE-2024-4896
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
CVE-2024-2830
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-6461
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
CVE-2024-6448
Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
CVE-2024-5574
WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-6554
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure
CVE-2024-13808
Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution
CVE-2024-4035
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scripting