← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2024-0856
Booking Calendar < 1.3.83 - CSRF appointment scheduling
CVE-2023-6444
Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure
CVE-2023-7246
System Dashboard < 2.8.10 - XSS via Header Injection
CVE-2024-5081
WP eMember <= v10.7.0 - Stored XSS via CSRF
CVE-2024-6390
Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS
CVE-2024-6270
Community Events < 1.5.1 - Admin+ Stored XSS
CVE-2021-25116
Enqueue Anything <= 1.0.1 - Subscriber+ Arbitrary Asset/Post Deletion
CVE-2021-24998
Simple JWT Login < 3.3.0 - Insecure Password Creation
CVE-2021-24837
Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24705
NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF