← All credits
WPScan
3915 vulnerability records and advisories credit this contributor.
CVE-2026-84744
WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation
CVE-2026-86838
Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation
CVE-2026-88828
Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords
CVE-2026-89411
Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent
CVE-2026-92996
Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
CVE-2026-84069
WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php
CVE-2026-81655
Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields
CVE-2026-82841
UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice
CVE-2026-85002
EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes
CVE-2026-86609
Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription