← All credits
Claudio Marchesini
39 vulnerability records and advisories credit this contributor.
CVE-2026-121759
Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDOR
CVE-2026-123088
UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII Disclosure
CVE-2026-106015
Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force
CVE-2026-121492
Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_update
CVE-2026-122001
Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF
CVE-2026-109150
WP PageNavi Style <= 1.4 - Stored XSS via CSRF
CVE-2026-113584
Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Update
CVE-2026-116533
Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter
CVE-2026-87784
Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission
CVE-2026-118423
WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload