← All credits
WPScan
4010 vulnerability records and advisories credit this contributor.
CVE-2026-19615
Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC
CVE-2026-19697
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
CVE-2026-19699
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
CVE-2026-74992
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
CVE-2026-75860
JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update
CVE-2026-17565
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
CVE-2026-16979
SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration
CVE-2026-16950
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products
CVE-2026-16617
Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description
CVE-2026-16616
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal