← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2026-92435
Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
CVE-2026-84750
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field
CVE-2026-81340
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
CVE-2026-81810
All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure
CVE-2026-84738
AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE
CVE-2026-84902
King Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog Import
CVE-2026-84903
King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode
CVE-2026-84904
King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer
CVE-2026-85009
RestroPress <= 3.4.6 - Unauthenticated Order Enumeration and Order Note Modification via Payment Recovery
CVE-2026-85122
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion