← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
CVE-2024-5073
Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed
CVE-2024-2123
Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-4370
WPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget
CVE-2024-4036
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-0433
Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7144
JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5162
WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
CVE-2024-7417
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
CVE-2024-6560
Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure