← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2024-7713
AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure
CVE-2024-8983
Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS
CVE-2024-8700
Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
CVE-2024-13925
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
CVE-2024-5333
The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure
CVE-2024-6289
WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure
CVE-2025-2594
User Registration & Membership < 4.1.3 - Authentication Bypass
CVE-2024-6477
UsersWP < 1.2.12 - Users Information Disclosure
CVE-2024-6420
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
CVE-2024-7315
Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure