← All credits
WPScan
4266 vulnerability records and advisories credit this contributor.
CVE-2026-6381
WP Maps < 4.9.3 - Subscriber+ Local File Inclusion
CVE-2026-6433
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE
CVE-2026-4935
SureTriggers < 1.1.23 – Unauthenticated SQLi
CVE-2026-5337
Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR
CVE-2026-5335
Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure
CVE-2026-5306
Check & Log Email < 2.0.13 - Unauthenticated Stored XSS
CVE-2026-4512
WP reCaptcha by WebDesignBy < 2.0 – Admin+ Stored XSS
CVE-2026-4106
HT Mega < 3.0.7 – Unauthenticated PII Disclosure
CVE-2024-7083
Email Encoder < 2.3.4 - Admin+ Stored XSS
CVE-2026-3830
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi