← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2023-5073
iframe forms <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframe Shortcode
CVE-2023-5411
Funnelforms Free <= 3.4 - Missing Authorization to Post Modification
CVE-2023-3158
Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-4025
Radio Player <= 2.0.73 - Missing Authorization to Player Update
CVE-2023-2171
BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3254
Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset
CVE-2023-3082
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
CVE-2023-5415
Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation
CVE-2023-3093
YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
CVE-2023-2174
BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries