← All credits
Drew Webber
33 vulnerability records and advisories credit this contributor.
CVE-2025-4803
Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection
CVE-2026-2569
Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels
CVE-2025-15001
FS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover
CVE-2025-15364
Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword
CVE-2025-14996
AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover
CVE-2026-2413
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
CVE-2025-31677
AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003
CVE-2024-13275
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039
CVE-2024-13266
Responsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030
CVE-2024-13299
Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065