← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-4702
Mega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
CVE-2024-3341
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
CVE-2024-9935
PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download
CVE-2024-7416
Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure
CVE-2025-0450
Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2025-6745
WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
CVE-2024-3675
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
CVE-2024-4329
Thim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7414
PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
CVE-2024-4564
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets