← All credits
WPScan
3950 vulnerability records and advisories credit this contributor.
CVE-2021-24209
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)
CVE-2022-22734
Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting
CVE-2022-4953
Elementor < 3.5.5 - Iframe Injection
CVE-2022-4393
ImageLinks Interactive Image Builder for WordPress <= 1.5.3 - Contributor+ Stored XSS
CVE-2022-4330
WP Attachments < 5.0.6 - Admin+ Stored XSS
CVE-2022-2891
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
CVE-2022-2552
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
CVE-2022-2354
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
CVE-2022-2370
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
CVE-2022-2239
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting