← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2022-0775
WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
CVE-2021-24566
WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
CVE-2021-24432
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
CVE-2023-1405
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
CVE-2023-5235
Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update
CVE-2023-5006
WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
CVE-2023-5943
Wp-Adv-Quiz < 1.0.3 - Admin+ Stored XSS
CVE-2023-3211
WordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection
CVE-2023-7204
WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting