← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-13736
NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API
CVE-2026-15046
LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF
CVE-2026-15150
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
CVE-2026-16650
Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass
CVE-2026-17559
Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass
CVE-2026-18356
Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email
CVE-2026-19848
ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name
CVE-2026-15049
Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import
CVE-2026-13405
Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder
CVE-2026-19615
Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC