← All credits
WPScan
4253 vulnerability records and advisories credit this contributor.
CVE-2026-9702
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
CVE-2026-10749
Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData
CVE-2026-10753
Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
CVE-2026-10735
ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
CVE-2026-10531
AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute
CVE-2026-9709
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure
CVE-2026-9710
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download
CVE-2026-8378
Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename
CVE-2026-8172
Simple Basic Contact Form <= 20250114 - Reflected XSS