← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14314
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR
CVE-2026-14240
Tourmaster < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Export
CVE-2026-14547
Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request Form
CVE-2026-16268
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
CVE-2026-11588
EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation
CVE-2026-16065
Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import
CVE-2026-18395
Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes
CVE-2026-16537
Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode
CVE-2026-13158
Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload
CVE-2026-13157
Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload