← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2026-84088
Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget
CVE-2026-84829
Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter
CVE-2026-84905
Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation
CVE-2026-84907
Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint
CVE-2026-85131
WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF
CVE-2026-85349
FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
CVE-2026-85530
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
CVE-2026-85569
Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification
CVE-2026-85572
Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure
CVE-2026-85641
Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter