← All credits
Alex Thomas
81 vulnerability records and advisories credit this contributor.
CVE-2025-9191
Houzez <= 4.1.6 - Authenticated (Subscriber+) PHP Object Injection via Saved Search
CVE-2023-2897
Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass
CVE-2023-5114
idbbee <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5116
Live updates from Excel <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-3213
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
CVE-2023-2894
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
CVE-2023-5416
Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion
CVE-2023-2189
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget
CVE-2023-4469
Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject