← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2024-5325
Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data
CVE-2024-11225
Premium Packages – Sell Digital Products Securely <= 5.9.3 - Reflected Cross-Site Scripting via add_query_arg
CVE-2025-2635
Digital License Manager <= 1.7.3 - Reflected Cross-Site Scripting via remove_query_arg Function
CVE-2025-1703
Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
CVE-2024-9018
WP Easy Gallery <= 4.8.5 - Authenticated (Contributor+) SQL Injection via key Parameter
CVE-2024-11199
Rescue Shortcodes <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rescue_progressbar Shortcode
CVE-2024-5970
MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode
CVE-2024-11945
Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-13680
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
CVE-2025-5841
ACF Onyx Poll <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter