← All credits
Lucio Sá
338 vulnerability records and advisories credit this contributor.
CVE-2026-15302
ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
CVE-2024-13365
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
CVE-2024-7258
WooCommerce Google Feed Manager <= 2.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Deletion
CVE-2024-11912
Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id
CVE-2023-6984
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.13 - Cross-Site Request Forgery
CVE-2024-6012
Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
CVE-2024-7858
Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions
CVE-2024-8433
Easy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-3592
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
CVE-2024-3609
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization