← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-8151
Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF
CVE-2026-81571
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
CVE-2026-82884
All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block
CVE-2026-83533
WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment
CVE-2026-83547
Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets
CVE-2023-3360
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
CVE-2024-3773
LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode
CVE-2025-15481
Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
CVE-2025-15485
Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
CVE-2025-15489
Passster < 4.2.24 - Password Protection Bypass