← All credits
WPScan
3272 vulnerability records and advisories credit this contributor.
CVE-2024-6420
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
CVE-2024-7315
Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure
CVE-2024-7786
Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
CVE-2024-13688
Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass
CVE-2024-4565
Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access
CVE-2024-1287
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi
CVE-2024-6846
SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge
CVE-2024-7714
AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls
CVE-2025-4094
Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing
CVE-2024-5973
MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor