← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2026-8071
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode Bypass
CVE-2026-7556
FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text
CVE-2026-5776
Email Encoder < 2.4.7 - Unauthenticated Stored XSS
CVE-2026-3220
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
CVE-2026-2052
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
CVE-2026-5306
Check & Log Email < 2.0.13 - Unauthenticated Stored XSS
CVE-2025-8684
Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-6546
One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure
CVE-2024-8242
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
CVE-2024-6499
WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure