← All credits
ch4r0n
20 vulnerability records and advisories credit this contributor.
CVE-2025-5814
Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration
CVE-2025-7826
Testimonial <= 2.3 - Authenticated (Contributor+) SQL Injection
CVE-2025-5818
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
CVE-2025-7822
WP Wallcreeper <= 1.6.1 - Missing Authorization to Authenticated (Susbcriber+) Cache Enable/Disable
CVE-2025-5815
Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update
CVE-2025-5817
Amazon Products to WooCommerce <= 1.2.7 - Unauthenticated Server-Side Request Forgery
CVE-2025-5816
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details
CVE-2025-7827
Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2025-7820
SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass
CVE-2025-6215
Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint