← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2026-92411
WP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
CVE-2026-96524
MCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF
CVE-2026-96525
MCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check
CVE-2026-96526
MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route
CVE-2026-96531
Optimole 4.0.0 - 4.2.12 - Author+ Stored XSS via Video Player Block
CVE-2026-96532
Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
CVE-2026-96533
Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
CVE-2026-86837
Bookly < 28.3 - Unauthenticated Customer PII Update via Verification Bypass
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
CVE-2026-88848
MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass