← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2026-77753
Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords
CVE-2026-78152
SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema
CVE-2026-80491
SAMO Forms <= 1.0.0 - Unauthenticated SQLi
CVE-2026-80494
Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download
CVE-2026-81090
Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF
CVE-2026-81402
DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload
CVE-2026-81429
Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF
CVE-2026-81742
BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation
CVE-2026-82845
Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
CVE-2026-82847
Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights