← All credits
Max Boll
16 vulnerability records and advisories credit this contributor.
CVE-2024-12038
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
CVE-2024-9595
TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-11721
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation
CVE-2024-9940
Calculated Fields Form <= 5.2.45 - HTML Injection
CVE-2024-11094
404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure
CVE-2024-11418
Additional Order Filters for WooCommerce <= 1.21 - Reflected Cross-Site Scripting
CVE-2025-1262
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
CVE-2024-12037
Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11722
Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
CVE-2024-11720
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting