← All credits
Alex Thomas
79 vulnerability records and advisories credit this contributor.
CVE-2023-2893
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
CVE-2025-8871
Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature
CVE-2023-3122
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
CVE-2024-2544
Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions
CVE-2023-2896
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
CVE-2023-0831
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice
CVE-2023-2895
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
CVE-2023-1888
Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
CVE-2023-5071
Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode