← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2023-5114
idbbee <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5116
Live updates from Excel <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3213
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
CVE-2023-2894
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
CVE-2023-5416
Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion
CVE-2023-2189
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget
CVE-2023-4469
Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2024-1397
HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag
CVE-2023-3088
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email