← All credits
Erwan LR (WPScan)
197 vulnerability records and advisories credit this contributor.
CVE-2026-18037
Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication
CVE-2026-18200
FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update
CVE-2026-11974
Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download
CVE-2026-14812
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
CVE-2026-4375
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
CVE-2026-8935
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
CVE-2026-1969
ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload
CVE-2025-2942
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
CVE-2024-0236
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
CVE-2024-0235
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure