← All credits
WPScan
4135 vulnerability records and advisories credit this contributor.
CVE-2026-19728
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
CVE-2026-19726
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
CVE-2026-19725
WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect
CVE-2026-19717
CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
CVE-2026-19714
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
CVE-2026-19712
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
CVE-2026-14832
ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone
CVE-2026-13700
WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure
CVE-2026-13610
KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration
CVE-2026-13328
TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification