← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-16569
ShopApper <= 0.4.62 - Subscriber+ Arbitrary Product Stock Update
CVE-2026-19223
Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
CVE-2026-19225
Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite
CVE-2026-19454
JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download
CVE-2026-19715
WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File
CVE-2026-76549
UpdraftPlus < 1.26.7 - Backup Restoration via CSRF
CVE-2026-77016
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment
CVE-2026-77017
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment
CVE-2026-77018
Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment
CVE-2026-78125
LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure