← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2023-5419
Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending
CVE-2023-2172
BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite
CVE-2024-1396
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
CVE-2023-0832
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
CVE-2023-3168
WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-6369
Export WP Page to Static HTML/CSS <= 2.1.9 - Missing Authorization via Multiple AJAX Actions
CVE-2023-1917
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3011
ARMember <= 4.0.5 - Cross-Site Request Forgery
CVE-2023-5386
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion
CVE-2023-4024
Radio Player <= 2.0.73 - Missing Authorization to Player Deletion