← All credits
WPScan
4165 vulnerability records and advisories credit this contributor.
CVE-2026-15209
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR
CVE-2026-15258
Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
CVE-2026-14928
JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject
CVE-2026-14922
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
CVE-2026-14921
Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode
CVE-2026-14845
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
CVE-2026-14834
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
CVE-2026-14554
Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
CVE-2026-14319
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
CVE-2026-15381
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter