← All credits
Alex Thomas
81 vulnerability records and advisories credit this contributor.
CVE-2023-5417
Funnelforms Free <= 3.4 - Missing Authorization to Category Update
CVE-2023-5860
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2023-2893
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
CVE-2025-8871
Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature
CVE-2023-3122
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
CVE-2024-2544
Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions
CVE-2023-2896
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
CVE-2023-0831
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice
CVE-2023-2895
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
CVE-2023-1888
Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation