← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-19697
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
CVE-2026-19699
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
CVE-2026-74992
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
CVE-2026-75860
JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update
CVE-2026-17565
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
CVE-2026-16979
SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration
CVE-2026-16950
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products
CVE-2026-16617
Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description
CVE-2026-16616
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal
CVE-2026-18031
TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback