← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-2262
Logo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-8422
Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
CVE-2025-2007
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2024-11582
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
CVE-2024-11976
BuddyPress <= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-1702
Ultimate Member <= 2.10.0 - Unauthenticated SQL Injection via search Parameter
CVE-2024-13507
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection
CVE-2025-2294
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
CVE-2025-2110
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
CVE-2025-11725
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization to Unauthenticated Plugin's Settings Modification