← All credits
WPScan
4010 vulnerability records and advisories credit this contributor.
CVE-2023-5354
Awesome Support < 6.1.5 - Reflected Cross-Site Scripting
CVE-2023-5454
Templately < 2.2.6 - Arbitrary post trashing via Missing Authorization
CVE-2023-1025
Simple File List < 6.0.10 - Admin+ Stored XSS
CVE-2022-3894
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
CVE-2023-0497
HT Portfolio < 1.1.6 - Arbitrary Plugin Activation via CSRF
CVE-2023-0940
ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
CVE-2023-0167
GetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS
CVE-2023-0370
WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS
CVE-2022-4148
WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
CVE-2023-0273
Custom Content Shortcode <= 4.0.2 - Contributor+ Stored XSS