← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2024-3921
Gianism <= 5.1.0 - Admin+ Stored XSS
CVE-2023-7165
JetBackup < 2.0.9.9 - Directory Listing Exposing Backups
CVE-2024-1307
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
CVE-2024-4751
WP Prayer II <= 2.4.7 - Settings Update via CSRF
CVE-2024-4534
KKProgressbar2 Free <= 1.1.4.2 - Stored XSS via CSRF
CVE-2024-3920
Flattr <= 1.2.2 - Admin+ Stored XSS
CVE-2024-2404
Better Comments < 1.5.6 - Subscriber+ Stored XSS
CVE-2024-4616
Widget Bundle <= 2.0.0 - Unauthencated Reflected XSS
CVE-2024-2231
Himer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR
CVE-2024-2857
Simple Buttons Creator <= 1.04 - Unauthenticated Stored XSS