← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2023-5041
Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection
CVE-2021-25117
WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting
CVE-2023-6447
EventPrime < 3.3.6 - Unauthenticated Event Access
CVE-2025-5209
Ivory Search < 5.5.10 - Admin+ Stored XSS
CVE-2022-23180
Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update
CVE-2023-6046
EventON < 2.2 - Admin+ Stored HTML Injection
CVE-2023-0224
GiveWP < 2.24.1 - Unauthenticated SQLi
CVE-2022-1617
WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF
CVE-2022-3836
Seed Social < 2.0.4 - Admin+ Stored XSS
CVE-2022-3604
Contact Form Entries < 1.3.0 - CSV Injection