← All credits
Brandon Roldan (Patchstack Alliance)
54 vulnerability records and advisories credit this contributor.
CVE-2024-33680
WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-33679
WordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-32827
WordPress Giveaways and Contests by RafflePress plugin <= 1.12.7 - IP Restriction Bypass vulnerability
CVE-2024-32786
WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability
CVE-2024-32521
WordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability
CVE-2024-32145
WordPress WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability
CVE-2024-31936
WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31935
WordPress Simple Post Notes plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31933
WordPress Page Builder: Live Composer plugin <= 1.5.35 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31426
WordPress Inline Related Posts plugin <= 3.3.1 - Cross Site Request Forgery (CSRF) vulnerability