← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2024-10587
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
CVE-2025-5529
Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13470
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-4411
Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-11765
WordPress Portfolio Plugin – A Plugin for Making Filterable Portfolio Grid, Portfolio Slider and more <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-7730
Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
CVE-2024-10647
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL
CVE-2024-13576
Gumlet Video <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-9109
UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
CVE-2024-13659
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting