← All credits
wesley
325 vulnerability records and advisories credit this contributor.
CVE-2024-2781
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
CVE-2024-6804
Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
CVE-2024-0255
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color
CVE-2024-1364
Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4487
Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads
CVE-2025-14002
WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
CVE-2024-9262
User Meta – User Profile Builder and User management plugin <= 3.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure
CVE-2024-3952
Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
CVE-2024-8794
BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
CVE-2024-0845
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render