← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
CVE-2025-2109
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
CVE-2025-7437
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
CVE-2025-1562
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
CVE-2024-12025
Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection
CVE-2024-13377
GravityForms <= 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameter
CVE-2025-3623
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
CVE-2025-3616
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-13378
GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameter