← All credits

Enrico Marcolini - Claudio Marchesini - Dottor Marc

21 vulnerability records and advisories credit this contributor.

Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_action

Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter

SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing

Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Confirmation Forgery via Unverified Success Return

Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint

Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter

Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback

Master Blocks 1.4.1 - 1.4.1.4 - Unauthenticated Stored XSS via White Label Settings

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings