← All credits
WPScan
4135 vulnerability records and advisories credit this contributor.
CVE-2026-18466
WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
CVE-2026-14334
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload
CVE-2026-18202
JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload
CVE-2026-18231
WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user
CVE-2026-16570
NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
CVE-2026-16058
YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration
CVE-2026-15253
Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title
CVE-2026-14861
User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR
CVE-2026-14826
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR
CVE-2026-14825
Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR