← All credits
WPScan
4266 vulnerability records and advisories credit this contributor.
CVE-2026-8293
Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip
CVE-2026-7862
Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation
CVE-2026-6268
EventPress < 22.2 – Reflected Cross-Site Scripting
CVE-2026-7385
Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
CVE-2026-5776
Email Encoder < 2.4.7 - Unauthenticated Stored XSS
CVE-2025-15609
Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure
CVE-2026-6495
Ajax Load More < 7.8.4 - Reflected XSS
CVE-2026-3220
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
CVE-2026-1631
Feeds for YouTube < 2.6.4 - Subscriber+ License Data Deletion
CVE-2026-6379
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter