← All credits
Pablo González and Francisco José Ramírez
4 vulnerability records and advisories credit this contributor.
CVE-2026-92435
Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
CVE-2026-86790
WP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box Shortcode
CVE-2026-10082
Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter
CVE-2026-13402
Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure