← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-78137
StoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-Cart
CVE-2026-78138
Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html
CVE-2026-78139
Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDOR
CVE-2026-78333
12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log
CVE-2026-74932
WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning
CVE-2026-13172
Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure
CVE-2026-13404
Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init
CVE-2026-14212
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
CVE-2026-14550
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
CVE-2026-16984
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure