← All credits
WPScan
4010 vulnerability records and advisories credit this contributor.
CVE-2026-14225
Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass
CVE-2026-14226
Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing
CVE-2026-16265
WP Maps < 4.9.7 - Subscriber+ Denial of Service
CVE-2026-16263
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-16262
Estatik < 4.3.3 - Login CSRF
CVE-2026-16258
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
CVE-2026-16041
MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-15215
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
CVE-2026-15245
BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
CVE-2026-15361
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request