← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2024-5029
CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
CVE-2023-5672
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
CVE-2023-5882
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
CVE-2023-5874
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
CVE-2023-5974
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
CVE-2023-5560
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
CVE-2023-4252
EventPrime <= 3.2.9 - Booking Pricing Bypass
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection
CVE-2024-9600
Ditty < 3.1.47 - Author+ Stored XSS
CVE-2024-8157
Alphabetical List <= 1.0.3 - Settings Update via CSRF