← All credits
Cheng Liu
19 vulnerability records and advisories credit this contributor.
CVE-2025-4334
Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
CVE-2025-4594
Tournamatch <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-3915
Aeropage Sync for Airtable <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
CVE-2025-3776
Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution
CVE-2025-4595
FastSpring <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-3952
Projectopia – WordPress Project Management <= 5.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion
CVE-2025-4420
Vayu Blocks <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter
CVE-2025-4591
Weluka Lite <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-4586
IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode
CVE-2025-4588
360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting