← All credits
WPScan
4126 vulnerability records and advisories credit this contributor.
CVE-2026-77758
Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
CVE-2026-77789
Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOR
CVE-2026-78146
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
CVE-2026-13406
Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure
CVE-2026-13176
Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery
CVE-2026-18781
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass
CVE-2026-16577
Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount
CVE-2026-16576
Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API
CVE-2026-16959
Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
CVE-2026-19085
Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure