← All credits
Pablo González Pérez
29 vulnerability records and advisories credit this contributor.
CVE-2026-93000
SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
CVE-2026-92996
Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
CVE-2026-88788
Text Styler <= 1.1.1 - Contributor+ Stored XSS
CVE-2026-86802
To Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import
CVE-2026-87840
Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering
CVE-2026-87839
Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion
CVE-2026-92404
MgoSync 2.1.5 - 2.1.6 - Unauthenticated WooCommerce API Credential Disclosure
CVE-2026-92430
Rede Itaú for WooCommerce < 5.4.7 - Unauthenticated Order Status Manipulation via PIX Webhook
CVE-2026-87786
Dewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout Coordinates
CVE-2026-88792
Dictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary Update