GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

WPScan

3474 vulnerability records and advisories credit this contributor.

CVE-2024-5033
SULly < 4.3.1 - Admin+ Stored XSS via CSRF
CVE-2024-5028
CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF
CVE-2024-5032
SULly < 4.3.1 - Reflected XSS
CVE-2024-5034
SULly < 4.3.1 - Plugin Reset via CSRF
CVE-2024-5002
User Submitted Posts < 20240516 - Admin+ Stored XSS
CVE-2024-5004
CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS
CVE-2024-4977
Index WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSS
CVE-2024-4969
Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF
CVE-2024-4959
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
CVE-2024-4957
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS