← All credits
Sean Murphy
20 vulnerability records and advisories credit this contributor.
CVE-2024-11851
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
CVE-2024-10673
Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
CVE-2023-7027
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device
CVE-2024-0835
Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update
CVE-2020-36852
Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping
CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2024-12597
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
CVE-2024-0869
Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Update
CVE-2024-7389
Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
CVE-2024-10728
PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation