← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-9807
The Events Calendar <= 6.15.1 - Unauthenticated SQL Injection
CVE-2025-13066
Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
CVE-2025-12714
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification
CVE-2025-11262
Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
CVE-2025-2276
Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation
CVE-2025-10289
Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection
CVE-2025-2056
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
CVE-2025-5282
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion