← All credits
WPScan
3915 vulnerability records and advisories credit this contributor.
CVE-2026-96962
Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code
CVE-2026-94239
Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration
CVE-2026-94238
Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter
CVE-2026-92923
Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Subscriber+ SQLi via get_addon_output_data
CVE-2026-92437
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
CVE-2026-91078
TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
CVE-2026-89236
SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters
CVE-2026-88783
Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content
CVE-2026-88782
Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute
CVE-2026-86834
MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration