← All credits
WPScan
4165 vulnerability records and advisories credit this contributor.
CVE-2026-16070
Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR
CVE-2026-16293
Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL
CVE-2026-16295
Clearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action Dispatcher
CVE-2026-16296
Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler
CVE-2026-16546
Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp
CVE-2026-16547
REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint
CVE-2026-12696
wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field
CVE-2026-13329
WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund
CVE-2026-13596
Participants Database < 2.7.8.4 - Unauthenticated SQL Injection via List Search
CVE-2026-15234
Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute