← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2026-84146
Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View
CVE-2026-19722
WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore
CVE-2026-10522
Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-77790
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
CVE-2026-14216
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
CVE-2026-16253
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
CVE-2025-15692
Icegram Express < 5.8.6 - Admin+ Stored XSS
CVE-2026-10821
Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
CVE-2026-14326
Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR
CVE-2026-17563
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form