← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-16960
Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
CVE-2026-18042
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation
CVE-2026-75861
Ultimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized Redemption
CVE-2026-80339
Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay
CVE-2026-80340
Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay
CVE-2026-80341
Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR
CVE-2026-81021
SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure
CVE-2026-81741
Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter
CVE-2026-82184
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
CVE-2026-82185
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset