← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-8416
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
CVE-2024-10640
The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-6253
UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read
CVE-2025-13035
Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains
CVE-2024-11219
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View
CVE-2024-11052
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations
CVE-2024-11733
WordPress Popular Posts <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-2270
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion
CVE-2025-9321
WPCasa <= 1.4.1 - Unauthenticated Code Injection
CVE-2024-13689
Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias