← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2026-80333
Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes
CVE-2026-75873
Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload
CVE-2026-75824
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
CVE-2026-75823
WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption
CVE-2026-100143
FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email
CVE-2026-11871
Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details
CVE-2026-89303
Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter
CVE-2026-93000
SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
CVE-2026-89300
WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients
CVE-2026-84744
WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation