← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2026-12877
Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter
CVE-2026-12690
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
CVE-2026-12689
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
CVE-2026-12688
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
CVE-2026-12497
ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection
CVE-2026-12981
CAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password Reset
CVE-2026-14603
WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection
CVE-2026-12082
Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)
CVE-2026-9577
Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
CVE-2026-9066
WP Compress < 7.10.04 - Reflected XSS via test_zone