← All credits
san6051
20 vulnerability records and advisories credit this contributor.
CVE-2026-6295
WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter
CVE-2026-1771
MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint
CVE-2026-1450
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter
CVE-2026-2425
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter
CVE-2026-3620
Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter
CVE-2026-1451
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter
CVE-2026-3349
MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter
CVE-2026-3348
MinhNhut Link Gateway <= 3.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Plugin Settings
CVE-2026-2280
rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
CVE-2026-2288
myLinksDump <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'link_title' Parameter