← All credits

WPScan

3921 vulnerability records and advisories credit this contributor.

CVE-2026-84021
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL
CVE-2026-84022
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element Attributes
CVE-2026-84221
Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
CVE-2026-84225
Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR
CVE-2026-84745
The Events Calendar &lt; 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API
CVE-2026-84896
King Addons for Elementor < 51.1.77 - Contributor+ Stored XSS via Magazine Grid Widget
CVE-2026-84898
Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta
CVE-2026-84899
VikWidgetsLoader < 1.12.0 - Contributor+ Stored XSS via Gutenberg Block class_suffix
CVE-2026-84901
Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization
CVE-2026-84926
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route