← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2024-5440
If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS
CVE-2024-6159
Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi
CVE-2024-6335
Tracking Code Manager < 2.3.0- Admin+ Stored Cross-Site Scripting
CVE-2024-6462
DL Yandex Metrika <= 1.2 - Admin+ Stored XSS
CVE-2024-6478
CTT Expresso para WooCommerce < 3.2.13 - Admin+ Stored XSS
CVE-2024-6718
PVN Auth Popup <= 1.0.0 - Contributor+ XSS via Shortcode
CVE-2024-6486
ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection
CVE-2024-6668
profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting
CVE-2024-6690
WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect
CVE-2024-6693
WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS