← All credits
Charles Vosburgh
29 vulnerability records and advisories credit this contributor.
CVE-2026-119273
BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log
CVE-2026-91049
EWWW Image Optimizer 8.7.4 - 8.9.0 - Author+ Stored XSS via 'data-script' Lazy Load Attribute
CVE-2026-112244
Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points
CVE-2026-111577
GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings
CVE-2026-115251
Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade
CVE-2026-110523
WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect
CVE-2026-104118
Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
CVE-2026-63045
Apache HTTP Server: mod_proxy_ftp PASV address handling
CVE-2026-59797
Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
CVE-2026-96896
Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request