← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2022-0885
Member Hero <= 1.0.9 - Unauthenticated RCE
CVE-2022-0833
Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure
CVE-2022-0828
Download Manager < 3.2.39 - Unauthenticated brute force of files master key
CVE-2022-0837
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
CVE-2022-0634
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
CVE-2022-0404
Material Design for Contact Form 7 <= 2.6.4 - Subscriber+ Arbitrary Settings Update leading to DoS
CVE-2022-0450
Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting
CVE-2022-0377
LearnPress < 4.1.5 - Arbitrary Image Renaming
CVE-2022-0345
Better Notifications for WP < 1.8.7 - Email Address Disclosure
CVE-2022-0444
XCloner < 4.3.6 - Plugin Settings Reset