← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2022-2370
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
CVE-2022-2239
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
CVE-2022-2241
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
CVE-2022-2099
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
CVE-2022-2146
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
CVE-2022-2083
Simple Single Sign On <= 4.1.0 - Authentication Bypass
CVE-2022-2034
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
CVE-2022-1762
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
CVE-2022-1574
HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload
CVE-2022-1598
WPQA < 5.5 - Unauthenticated Private Message Disclosure