← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2023-6620
Post SMTP < 2.8.7 - Admin+ SQL Injection
CVE-2023-5905
DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
CVE-2025-4955
tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS
CVE-2023-6627
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
CVE-2023-6555
Email Subscription Popup < 1.2.20 - Reflected XSS
CVE-2023-6532
WP Blogs' Planetarium <= 1.0 - Settings Update via CSRF
CVE-2023-6529
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS
CVE-2023-6505
Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure
CVE-2023-6141
Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
CVE-2023-5957
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code Execution