← All credits
Scott Moore - VulnCheck
36 vulnerability records and advisories credit this contributor.
CVE-2026-53673
BuddyPress 14.4.0 Private Message IDOR via REST API user_id Parameter
CVE-2026-22209
wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag
CVE-2026-59711
showdown - Cross-Site Scripting via Unescaped Metadata Title in completeHTMLDocument
CVE-2026-59710
showdown - Stored XSS via Unescaped Table Header ID Attribute Injection
CVE-2026-32774
Vulnogram - Stored Cross-Site Scripting via Comment Hypertext
CVE-2026-28557
wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler
CVE-2026-28562
wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter
CVE-2026-28561
wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates
CVE-2026-28560
wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script
CVE-2026-28559
wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed