← All credits
Francesco Carlucci
565 vulnerability records and advisories credit this contributor.
CVE-2024-8481
Special Text Boxes <= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-6167
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions
CVE-2024-0910
Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
CVE-2023-6968
The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions
CVE-2024-0791
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization
CVE-2024-2256
oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9269
Relogo <= 0.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-5342
Simple Image Popup Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-11282
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure