← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2026-88764
Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref
CVE-2026-88912
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR
CVE-2026-88995
Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check
CVE-2026-89080
Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion
CVE-2026-83532
Custom Menu Wizard <= 3.3.1 - Contributor+ Stored XSS via Shortcode Attributes
CVE-2026-75800
Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse
CVE-2026-77005
Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal
CVE-2026-77689
Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass
CVE-2026-77705
Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover
CVE-2026-77752
Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation