← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2026-12378
BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection
CVE-2026-12277
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal
CVE-2026-4375
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
CVE-2026-12375
Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server
CVE-2025-15546
Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition
CVE-2026-11962
FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations
CVE-2024-6228
WANotifier < 2.6 - Subscriber+ LFI
CVE-2026-10830
AllCoach < 1.0.2 - Unauthenticated Account Takeover
CVE-2026-11766
Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields
CVE-2026-11855
Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version