← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2024-8094
Ntz Antispam <= 2.0e - Settings Update via CSRF
CVE-2024-8095
BabelZ – Google Translate Widget <= 1.1.5 - CSRF to Stored XSS
CVE-2024-8187
Smart Post Show <= 3.0.0 - Editor+ Stored XSS
CVE-2024-8699
Z-Downloads < 1.11.5 - Admin+ Arbitrary File Upload
CVE-2024-8701
Event Calendar <= 1.0.4 - Admin+ Stored XSS
CVE-2025-0329
AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS
CVE-2025-0687
Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS
CVE-2025-0688
Spiritual Gifts Survey <= 0.9.10 - Unauthenticated CSRF to XSS
CVE-2025-1033
Badgearoo <= 1.0.14 - Admin+ Stored XSS
CVE-2025-1286
Download HTML TinyMCE Button <= 1.2 - Reflected XSS