← All credits
WPScan
4253 vulnerability records and advisories credit this contributor.
CVE-2026-12275
Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration
CVE-2026-12396
WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection
CVE-2026-12397
WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR
CVE-2026-12582
Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id
CVE-2026-12685
EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor
CVE-2026-12276
LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration
CVE-2026-10834
WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image
CVE-2026-12516
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy
CVE-2026-12270
Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints
CVE-2026-11875
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery