← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2023-6384
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
CVE-2023-6029
EazyDocs < 2.3.6 - Unauthenticated Arbitrary Posts Deletion and Document Management
CVE-2023-6946
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF
CVE-2023-0389
Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields
CVE-2025-4954
Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload
CVE-2025-4652
Broadstreet < 1.51.8 - Reflected XSS
CVE-2025-4840
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
CVE-2025-3582
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
CVE-2025-3581
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget
CVE-2023-5956
Wp-Adv-Quiz <= 1.0.2 - Admin+ Stored XSS in Quiz Overview