← All credits
Paolo Tresso
12 vulnerability records and advisories credit this contributor.
CVE-2026-6271
Career Section <= 1.7 - Unauthenticated Arbitrary File Upload
CVE-2023-4690
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
CVE-2026-1258
Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints
CVE-2025-14941
GZSEO <= 2.0.11 - Authenticated (Contributor+) Authorization Bypass to Stored Cross-Site Scripting
CVE-2023-5381
Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-4723
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
CVE-2025-14938
Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload
CVE-2023-4689
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
CVE-2025-14937
Frontend Admin by DynamiApps <= 3.28.23 - Unauthenticated Stored Cross-Site Scripting via 'update_field'
CVE-2026-0563
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode