← All credits
WPScan
3241 vulnerability records and advisories credit this contributor.
CVE-2024-4886
BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR
CVE-2024-1401
Profile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS
CVE-2024-4372
Carousel Slider < 2.2.11 - Editor+ Stored XSS
CVE-2023-0071
WP Tabs < 2.1.17 - Contributor+ Stored XSS
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'
CVE-2022-4834
CPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via Shortcode
CVE-2022-4835
Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode
CVE-2022-4792
News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode
CVE-2022-4395
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
CVE-2022-4680
Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 9.0.11 - PHP Object Injection