← All credits
WPScan
4200 vulnerability records and advisories credit this contributor.
CVE-2023-4297
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
CVE-2023-5942
Medialist < 1.4.1 - Contributor+ Stored XSS
CVE-2023-2707
Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS
CVE-2025-4578
File Provider <= 1.2.3 - Unauthenticated SQLi
CVE-2025-4580
File Provider <= 1.2.3 - Item Deletion via CSRF
CVE-2025-3584
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
CVE-2025-3662
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS
CVE-2025-4567
Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS
CVE-2023-5877
affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
CVE-2023-6042
Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin