← All credits
andrea bocchetti
32 vulnerability records and advisories credit this contributor.
CVE-2018-25371
mooSocial Store Plugin 2.6 SQL Injection via product parameter
CVE-2022-50970
WordPress Plugin AAWP 3.16 Reflected XSS via tab Parameter
CVE-2026-4803
Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
CVE-2026-1782
MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'
CVE-2026-0632
Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource'
CVE-2024-6010
Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation
CVE-2026-1261
MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-14533
Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action
CVE-2025-14947
All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion
CVE-2025-14757
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass