← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-15152
WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass
CVE-2026-14842
Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass
CVE-2026-14831
Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass
CVE-2026-14936
Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification
CVE-2026-14812
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
CVE-2026-13399
Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order
CVE-2026-14306
Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass
CVE-2026-5336
Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure
CVE-2026-11976
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
CVE-2026-10599
Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse