← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2025-5258
Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
CVE-2024-10869
GuardGiant Brute Force Protection <= 2.2.6 - Reflected Cross-Site Scripting
CVE-2025-13889
Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2024-10164
Premium Packages - Sell Digital Products Securely <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdmpp_pay_link Shortcode
CVE-2025-3863
Post Carousel Slider for Elementor <= 1.6.0 - Authenticated (Subscriber+) Missing Authorization via process_wbelps_promo_form Function
CVE-2024-13587
Zigaform – Price Calculator & Cost Estimation Form Builder Lite <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4742
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
CVE-2024-10682
Bulletin Announcements <= 3.11.7 - Reflected Cross-Site Scripting
CVE-2024-10884
SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting
CVE-2024-10880
JobBoardWP – Job Board Listings and Submissions <= 1.3.0 - Reflected Cross-Site Scripting