← All credits
WPScan
3894 vulnerability records and advisories credit this contributor.
CVE-2026-91827
Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export
CVE-2026-85010
RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion
CVE-2026-86802
To Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import
CVE-2026-85113
GiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name
CVE-2026-82187
WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload
CVE-2026-92410
Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF
CVE-2026-87963
Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter
CVE-2026-92965
TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption
CVE-2026-92541
Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer