← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2024-6330
GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI
CVE-2024-6134
WP eStore < 8.5.6 - Reflected XSS in Product Editing
CVE-2024-6724
Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
CVE-2024-6158
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
CVE-2023-7247
Login as User or Customer <= 3.8 - Admin Account Takeover
CVE-2023-6585
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
CVE-2024-1564
Schema Pro < 2.7.16 - Contributor+ Custom Field Access
CVE-2024-0868
coreActivity < 2.1 - Unauthenticated IP Spoofing
CVE-2023-7201
Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload
CVE-2024-1306
Smart Forms < 2.6.94 - Edit Entries via CSRF