← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-15215
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
CVE-2026-15245
BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
CVE-2026-15361
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
CVE-2026-15386
Meow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-Text
CVE-2026-16038
MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
CVE-2026-16039
MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR
CVE-2026-15032
wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion
CVE-2026-14943
Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API
CVE-2026-14331
Subscribe2 < 10.46 - Reflected XSS via email Parameter
CVE-2026-14205
WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter