← All credits
Ramuel Gall, Wordfence
29 vulnerability records and advisories credit this contributor.
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS
CVE-2022-1656
JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification
CVE-2022-1657
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
CVE-2022-1463
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
CVE-2022-1329
Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution
CVE-2022-28221
CleanTalk AntiSpam <= 5.173 Reflected XSS
CVE-2022-28222
CleanTalk AntiSpam <= 5.173 Reflected XSS
CVE-2022-24664
Remote Code Execution by by Contributor+ users via WordPress metabox
CVE-2022-24663
Remote Code Execution by Subscriber+ users via WordPress shortcode
CVE-2022-24665
Remote Code Execution by by Contributor+ users via WordPress gutenberg block