← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2026-87978
Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback
CVE-2026-90950
Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form
CVE-2026-88788
Text Styler <= 1.1.1 - Contributor+ Stored XSS
CVE-2026-92438
Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin
CVE-2026-91827
Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export
CVE-2026-85010
RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion
CVE-2026-86802
To Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import
CVE-2026-85113
GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name
CVE-2026-82187
WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload