← All credits
WPScan
4135 vulnerability records and advisories credit this contributor.
CVE-2022-4649
WP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode
CVE-2022-4496
miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login
CVE-2022-4654
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode
CVE-2024-1658
Grid Shortcodes < 1.1.1 - Contributor+ Stored XSS
CVE-2024-4750
BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
CVE-2024-3823
Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF
CVE-2024-0757
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
CVE-2022-4793
Blog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcode
CVE-2024-0399
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
CVE-2022-4776
CC Child Pages < 1.43 - Contributor+ Stored XSS via Shortcode