← All credits
WPScan
3950 vulnerability records and advisories credit this contributor.
CVE-2026-19840
Notiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX Actions
CVE-2026-77770
miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator
CVE-2026-77771
miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP Lockout
CVE-2026-78361
zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option Deletion
CVE-2026-81431
Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id
CVE-2026-82925
Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature
CVE-2025-15690
Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
CVE-2026-13144
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset
CVE-2026-13146
WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR
CVE-2026-14962
ELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_id