← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2021-24559
Qyrr < 0.7 - Authenticated (contributor+) Stored XSS
CVE-2021-24151
WP Editor < 1.2.7 - Authenticated SQL injection
CVE-2023-6941
Keap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS
CVE-2023-6620
Post SMTP < 2.8.7 - Admin+ SQL Injection
CVE-2023-5905
DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
CVE-2025-4955
tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS
CVE-2023-6627
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
CVE-2023-6555
Email Subscription Popup < 1.2.20 - Reflected XSS
CVE-2023-6532
WP Blogs' Planetarium <= 1.0 - Settings Update via CSRF
CVE-2023-6529
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS