← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2026-81809
Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback
CVE-2026-81739
Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback
CVE-2026-19253
Cache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_url
CVE-2026-101148
BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
CVE-2026-101147
Featured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRF
CVE-2025-9544
Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation
CVE-2025-9543
FlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSS
CVE-2025-8944
OceanWP < 4.1.2 - Subscriber+ Limited Option Update
CVE-2025-8280
Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-8085
Ditty < 3.1.58 - Unauthenticated SSRF