← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2023-3209
MStore API < 3.9.7 - Settings Update via CSRF
CVE-2023-1208
HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
CVE-2024-3754
Alemha Watermarker <= 1.3.1 - Author+ Stored XSS
CVE-2024-7982
Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS
CVE-2024-9689
Post From Frontend <= 1.0.0 - Post Deletion via CSRF
CVE-2024-8378
Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass
CVE-2024-9926
Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access
CVE-2024-1589
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings
CVE-2024-3580
Popup4Phone <= 1.3.2 - Editor+ Stored XSS
CVE-2024-10027
WP Booking Calendar < 10.6.3 - Admin+ Stored XSS