← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2025-4567
Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS
CVE-2023-5877
affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
CVE-2023-6042
Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin
CVE-2023-6139
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
CVE-2018-25095
Duplicator < 1.3.0 - Unauthenticated RCE
CVE-2023-6528
Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
CVE-2023-6049
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
CVE-2023-6843
easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
CVE-2023-6048
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
CVE-2023-6050
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS