← All credits
WPScan
3857 vulnerability records and advisories credit this contributor.
CVE-2025-9544
Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation
CVE-2025-9543
FlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSS
CVE-2025-8944
OceanWP < 4.1.2 - Subscriber+ Limited Option Update
CVE-2025-8280
Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-8085
Ditty < 3.1.58 - Unauthenticated SSRF
CVE-2025-15484
Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass
CVE-2025-12569
WP Front User Submit < 5.0.0 - Open Redirect
CVE-2025-15611
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
CVE-2025-15441
Form Maker < 1.15.38 - SQL Injection
CVE-2025-14804
Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion