← All credits
WPScan
4126 vulnerability records and advisories credit this contributor.
CVE-2026-17044
WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid
CVE-2026-17014
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
CVE-2026-17011
Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection
CVE-2026-16992
Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
CVE-2026-16965
Solace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_status
CVE-2026-16957
Slim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure
CVE-2026-16955
AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription
CVE-2026-16953
AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie
CVE-2026-16948
Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce Exposure
CVE-2026-16608
Download Monitor < 5.2.6 - Unauthenticated Download Log Injection