← All credits
Miguel Santareno
14 vulnerability records and advisories credit this contributor.
CVE-2025-10651
Welcart e-Commerce <= 2.11.22 - Authenticated (Editor+) Stored Cross-Site Scripting via order_mail
CVE-2026-1304
Membership Plugin – Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
CVE-2024-8369
EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
CVE-2025-9367
Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2025-9808
The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure
CVE-2023-6005
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
CVE-2023-6447
EventPrime < 3.3.6 - Unauthenticated Event Access
CVE-2023-6046
EventON < 2.2 - Admin+ Stored HTML Injection
CVE-2023-4388
EventON < 2.2 - Admin+ Stored XSS
CVE-2023-5238
EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter