← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2023-4797
Newsletter Lite < 4.9.3 - Admin+ Command Injection
CVE-2023-6456
WP Review Slider < 13.0 - Admin+ Stored XSS
CVE-2023-6991
JSM file_get_contents() Shortcode < 2.7.1 - Contributor+ SSRF
CVE-2023-6271
Backup Migration Staging < 1.3.6 - Sensitive Data Exposure
CVE-2023-6824
WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak
CVE-2023-6373
ArtPlacer Widget < 2.20.7 - Editor+ SQLi
CVE-2023-6623
Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion
CVE-2023-6384
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
CVE-2023-6029
EazyDocs < 2.3.6 - Unauthenticated Arbitrary Posts Deletion and Document Management
CVE-2023-6946
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF