← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2023-3721
WP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting
CVE-2023-3954
MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
CVE-2023-4023
All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR
CVE-2025-3583
Newsletter < 8.7.1 - Admin+ Stored XSS
CVE-2023-3720
Upload Media By URL < 1.0.8 - Stored XSS via CSRF
CVE-2023-4294
URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header
CVE-2023-4620
Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS
CVE-2023-4270
Min Max Control < 4.6 - Reflected XSS
CVE-2023-4502
Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
CVE-2023-4036
Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access