← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2026-87894
Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR
CVE-2026-87916
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
CVE-2026-87918
WPBot < 8.5.7 - Unauthenticated AI Provider API Abuse via Multiple AJAX Actions
CVE-2026-87919
Product XML Feed Manager for WooCommerce < 3.1.1 - Contributor+ Arbitrary Product Deletion via Shortcode
CVE-2026-82213
Nexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Saved Payment Token Disclosure via IDOR
CVE-2026-82215
WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook
CVE-2026-85116
Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation
CVE-2026-86809
Persian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass
CVE-2026-86813
MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To
CVE-2026-83545
CoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSON