← All credits
tmrswrr
20 vulnerability records and advisories credit this contributor.
CVE-2025-12733
Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic
CVE-2025-11889
AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import
CVE-2024-9874
WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection
CVE-2025-13409
Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection
CVE-2025-13138
WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function
CVE-2024-58293
Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields
CVE-2024-58289
Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
CVE-2024-58297
PyroCMS v3.0.1 Stored Cross-Site Scripting via Admin Redirects
CVE-2024-58291
Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field
CVE-2024-58295
ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload