← All credits
thiennv (Patchstack Alliance)
134 vulnerability records and advisories credit this contributor.
CVE-2023-33329
WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-33325
WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-33322
WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability
CVE-2023-32966
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
CVE-2023-32965
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32603
WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32519
WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability
CVE-2023-32520
WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability
CVE-2023-32518
WordPress WP Chinese Conversion Plugin <= 1.1.16 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32511
WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)