← All credits
WPScan
4253 vulnerability records and advisories credit this contributor.
CVE-2026-9576
Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export
CVE-2026-9676
f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification
CVE-2026-10820
ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR
CVE-2026-10083
APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution
CVE-2026-9677
Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting
CVE-2026-8380
Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion
CVE-2026-10835
SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection
CVE-2026-10823
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
CVE-2026-10824
Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion
CVE-2026-5305
Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS