← All credits
WPScan
3438 vulnerability records and advisories credit this contributor.
CVE-2026-85038
B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection
CVE-2026-84937
YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax
CVE-2026-84936
EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat
CVE-2026-84935
HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings
CVE-2026-84934
JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override
CVE-2026-84931
Joli Table Of Contents < 3.0.3 - Author+ Stored XSS via joli-toc Shortcode Theme Attribute
CVE-2026-84930
CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block Attribute
CVE-2026-84927
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification
CVE-2026-84926
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route
CVE-2026-84901
Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization