← All credits
WPScan
4326 vulnerability records and advisories credit this contributor.
CVE-2026-111974
GiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency
CVE-2026-103381
Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery
CVE-2026-103319
OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key
CVE-2026-103306
iKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via Callback
CVE-2026-103300
Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback
CVE-2026-103299
nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret
CVE-2026-103298
CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery
CVE-2026-10735
ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
CVE-2026-115251
Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade
CVE-2026-115214
Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers