← All credits
WPScan
4198 vulnerability records and advisories credit this contributor.
CVE-2026-14592
WP Real IP-based Access Control <= 1.3.1 - Unauthenticated Stored XSS via acl_ctrl_addr
CVE-2026-14207
LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information
CVE-2026-11881
Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field
CVE-2026-13330
Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload
CVE-2026-13344
Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag
CVE-2026-11351
ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure
CVE-2026-13423
Streamit <= 4.5.0 - Unauthenticated Remote Code Execution via Arbitrary Function Call
CVE-2026-13605
Photo Swipe <= 4.1.1.1 - Author+ Stored XSS via title Attribute
CVE-2026-13690
UsersWP < 1.2.67 - Two-Factor Authentication Bypass
CVE-2026-14545
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset