← All credits
WPScan
4266 vulnerability records and advisories credit this contributor.
CVE-2026-9062
Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal
CVE-2026-8385
WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback
CVE-2026-9271
KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS
CVE-2026-9269
Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter
CVE-2026-9067
Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
CVE-2026-3326
XStore < 9.7.3 - Unauthenticated SQLi
CVE-2026-8071
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode Bypass
CVE-2026-9060
Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style
CVE-2026-4986
WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery
CVE-2026-8981
Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML