← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-11361
Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
CVE-2026-3430
Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi
CVE-2026-16054
Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle
CVE-2026-15246
RealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment Bypass
CVE-2026-13703
SEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule Disclosure
CVE-2026-14204
Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF
CVE-2026-16746
MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint
CVE-2026-16940
Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
CVE-2026-16981
DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDOR
CVE-2026-13154
Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint