← All credits
Philipp Doblhofer
13 vulnerability records and advisories credit this contributor.
CVE-2026-12980
Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable
CVE-2026-86826
BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX
CVE-2026-103426
Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter
CVE-2026-85415
Audio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URL
CVE-2026-89006
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import
CVE-2026-92411
WP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
CVE-2026-88995
Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check
CVE-2026-83545
CoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSON
CVE-2026-83546
CoolClock < 4.3.8 - Contributor+ Stored XSS via Skin Class Attribute
CVE-2026-74925
MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator