← All credits
Pablo González Pérez
29 vulnerability records and advisories credit this contributor.
CVE-2026-19053
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
CVE-2026-18395
Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes
CVE-2026-16942
WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS
CVE-2026-15958
Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX
CVE-2026-16536
Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id
CVE-2026-16273
Narrative Publisher <= 1.0.7 - Contributor+ Stored XSS via narrative_post_script Post Meta
CVE-2026-16539
SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication
CVE-2026-16572
LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie
CVE-2026-12512
Quotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc Parameter