← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2022-2552
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
CVE-2022-2354
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
CVE-2022-2370
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
CVE-2022-2239
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
CVE-2022-2241
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
CVE-2022-2099
WooCommerce < 6.6.0 - Admin+ Stored HTML Injection
CVE-2022-2146
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
CVE-2022-2083
Simple Single Sign On <= 4.1.0 - Authentication Bypass
CVE-2022-2034
Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API
CVE-2022-1762
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing