← All credits
Erwan LR (WPScan)
155 vulnerability records and advisories credit this contributor.
CVE-2026-81807
Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification
CVE-2026-19116
WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
CVE-2026-76548
Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
CVE-2026-18234
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet
CVE-2026-18233
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion
CVE-2026-17522
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
CVE-2026-17520
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key
CVE-2026-77018
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment
CVE-2026-19084
Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read
CVE-2026-18200
FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update