← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-5503
WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
CVE-2024-1519
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-7366
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
CVE-2024-8720
RumbleTalk Live Group Chat – HTML5 <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10006
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0845
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render
CVE-2024-4342
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-6556
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.8 - Unauthenticated Full Path Disclosure
CVE-2024-3734
FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-6743
WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting