← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2025-9441
iATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameter
CVE-2025-5234
Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter
CVE-2025-9029
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function
CVE-2024-9895
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
CVE-2024-13591
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11878
Category Post Slider <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10177
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode
CVE-2025-5116
WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter
CVE-2025-3814
Tax Switch for WooCommerce <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
CVE-2025-3858
Formality <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter