← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2023-6163
WP Crowdfunding < 2.1.10 - Admin+ Stored XSS
CVE-2023-2921
Short URL <= 1.6.8 - Subscriber+ SQLi
CVE-2023-5604
Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload
CVE-2023-4297
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
CVE-2023-5942
Medialist < 1.4.1 - Contributor+ Stored XSS
CVE-2023-2707
Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS
CVE-2025-4578
File Provider <= 1.2.3 - Unauthenticated SQLi
CVE-2025-4580
File Provider <= 1.2.3 - Item Deletion via CSRF
CVE-2025-3584
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
CVE-2025-3662
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS