← All credits
WPScan
3915 vulnerability records and advisories credit this contributor.
CVE-2026-86832
MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API
CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter
CVE-2026-85015
Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal
CVE-2026-80518
WP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log Path
CVE-2026-80517
WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload
CVE-2026-103514
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
CVE-2026-103293
MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import
CVE-2026-101162
WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
CVE-2026-101161
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
CVE-2026-101160
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating