← All credits
WPScan
3241 vulnerability records and advisories credit this contributor.
CVE-2022-3934
Flat PM < 3.0.13 - Reflected Cross-Site Scripting
CVE-2022-3999
WooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options Deletion
CVE-2024-13569
Front End Users <= 3.2.32 - Reflected XSS
CVE-2022-4016
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
CVE-2022-3590
WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding
CVE-2025-2162
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
CVE-2023-5980
BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting
CVE-2025-1523
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
CVE-2025-1524
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
CVE-2025-1525
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS