← All credits
WPScan
4266 vulnerability records and advisories credit this contributor.
CVE-2026-4432
YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR
CVE-2026-4338
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
CVE-2026-4079
SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection
CVE-2026-1900
Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update
CVE-2026-1540
Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution
CVE-2026-3881
Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF
CVE-2026-2466
DukaPress <= 3.2.4 - Reflected XSS
CVE-2026-2418
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
CVE-2026-2343
PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download
CVE-2026-1542
Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection