← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2025-6673
Easy restaurant menu manager <= 2.0.1 - Authenticated (Contributot+) Stored Cross-Site Scripting via `nsc_eprm_menu_link` Shortcode
CVE-2023-4919
iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
CVE-2023-4027
Radio Player <= 2.0.73 - Missing Authorization to Settings Update
CVE-2023-3135
Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-2764
Draw Attention <= 2.0.11 - Missing Authorization to Arbitrary Post Featured Image Modification
CVE-2024-3565
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
CVE-2023-5096
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3080
WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
CVE-2023-5417
Funnelforms Free <= 3.4 - Missing Authorization to Category Update
CVE-2023-5860
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload