← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2025-9163
Houzez <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2023-2555
WPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Custom Drop-Down Currency Switcher Creation
CVE-2023-2031
Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3025
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
CVE-2023-3166
Lana Email Logger <= 1.0.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-2557
WPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Arbitrary Custom Drop-Down Currency Switcher Editing
CVE-2023-3167
Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-3136
MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-5387
Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
CVE-2023-3023
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'