← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-13540
WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure
CVE-2024-4663
OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7630
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
CVE-2024-6550
Gravity Forms: Multiple Form Instances <= 1.1.1 - Unauthenticated Full Path Disclosure
CVE-2024-1296
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4037
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-7411
Newsletters <= 4.9.9 - Unauthenticated Full Path Disclosure
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
CVE-2024-10849
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3338
Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting