← All credits
Erwan LR (WPScan)
172 vulnerability records and advisories credit this contributor.
CVE-2026-18046
Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update
CVE-2026-18049
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
CVE-2026-18230
WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter
CVE-2026-18044
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch
CVE-2026-18037
Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
CVE-2026-18200
FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update
CVE-2026-11974
Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download
CVE-2026-14812
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
CVE-2026-13423
Streamit <= 4.5.0 - Unauthenticated Remote Code Execution via Arbitrary Function Call
CVE-2026-4375
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE