← All credits
Peter Thaleikis
361 vulnerability records and advisories credit this contributor.
CVE-2024-5449
WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization
CVE-2024-12623
DICOM Support <= 0.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11732
BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter
CVE-2025-1666
Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission
CVE-2024-9897
StreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode
CVE-2024-12502
My IDX Home Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9849
Html Social share buttons <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11786
Login with Vipps and MobilePay <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12645
Inline frame – Iframe <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-5239
Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter