← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2022-1617
WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF
CVE-2022-3836
Seed Social < 2.0.4 - Admin+ Stored XSS
CVE-2022-3604
Contact Form Entries < 1.3.0 - CSV Injection
CVE-2022-0775
WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
CVE-2021-24566
WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion
CVE-2021-24432
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
CVE-2023-1405
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
CVE-2023-5235
Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update
CVE-2023-5006
WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
CVE-2023-5943
Wp-Adv-Quiz < 1.0.3 - Admin+ Stored XSS