← All credits
WPScan
3260 vulnerability records and advisories credit this contributor.
CVE-2025-9697
Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection
CVE-2025-9512
Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS
CVE-2025-5305
Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
CVE-2025-8942
WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
CVE-2025-9083
Ninja-forms < 3.11.1 - Unauthenticated PHP Objection
CVE-2025-9115
Etsy Shop < 3.0.7 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-9487
Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG
CVE-2025-9540
Markup Markdown < 3.20.10 - Contributor+ Stored XSS
CVE-2025-9541
Markup Markdown < 3.20.10 - Contributor+ Stored XSS
CVE-2024-1330
Kadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access