← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2025-12417
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9027
WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
CVE-2024-5335
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection
CVE-2024-13579
WP-Asambleas <= 2.85.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11444
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Cross-Site Request Forgery to Module Deletion
CVE-2024-13589
YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13686
VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
CVE-2025-6221
Embed Bokun <= 0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
CVE-2024-12414
Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery
CVE-2024-10179
Slickstream: Engagement and Conversions <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcode