← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2026-92425
Hydra Booking < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion via IDOR
CVE-2026-92430
Rede Itaú for WooCommerce < 5.4.7 - Unauthenticated Order Status Manipulation via PIX Webhook
CVE-2026-92435
Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
CVE-2026-84750
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field
CVE-2026-81340
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
CVE-2026-81810
All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure
CVE-2026-84738
AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE
CVE-2026-84902
King Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog Import
CVE-2026-84903
King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode
CVE-2026-84904
King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer