← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2024-12595
AHAthat Plugin <= 1.6 - Reflected XSS via REQUEST_URI
CVE-2023-1119
Multiple Plugins - Cross-Site Scripting From Third-party Library
CVE-2024-11356
Tourmaster < 5.3.4 - Unauthenticated Stored XSS via Room Booking
CVE-2024-11849
Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
CVE-2024-12302
Icegram Engage < 3.1.32 - Author+ Stored XSS
CVE-2024-12311
Email Subscribers < 5.7.44 - Admin+ SQL Injection
CVE-2023-1323
Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
CVE-2023-0431
File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode
CVE-2023-2398
Icegram Engage < 3.1.12 - Reflected XSS
CVE-2023-2568
Photo Gallery by Ays < 5.1.7 - Reflected XSS