← All credits
Erwan LR (WPScan)
158 vulnerability records and advisories credit this contributor.
CVE-2026-82923
AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes
CVE-2026-74853
Pods < 3.3.9.2 - Author+ Arbitrary File Read via Shortcode Display Callback
CVE-2026-81807
Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification
CVE-2026-81571
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
CVE-2026-19116
WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
CVE-2026-76548
Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
CVE-2026-18234
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet
CVE-2026-18233
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion
CVE-2026-17522
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
CVE-2026-17520
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key