← All credits
Dthangws
5 vulnerability records and advisories credit this contributor.
CVE-2026-103962
User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter
CVE-2026-100180
Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
CVE-2026-85002
EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes
CVE-2026-89333
Tutor LMS <= 4.0.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' Parameter
CVE-2026-18983
One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter