← All credits
João Ramos Maciel
26 vulnerability records and advisories credit this contributor.
CVE-2026-84047
Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action
CVE-2026-84171
WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload
CVE-2026-13598
RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-16959
Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
CVE-2026-16950
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products
CVE-2026-16949
Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup
CVE-2026-18666
Library Management System < 3.6.7 - Subscriber+ SQL Injection via Filter Value
CVE-2026-16535
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
CVE-2026-13725
Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax
CVE-2026-16618
ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution