← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2026-93580
InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
CVE-2026-94297
Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation
CVE-2026-96886
Course Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export
CVE-2026-75873
Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload
CVE-2026-11871
Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details
CVE-2026-89303
Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter
CVE-2026-93000
SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
CVE-2026-89300
WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients
CVE-2026-84744
WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation