← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2024-10848
NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-0366
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
CVE-2024-3957
Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-13538
BigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute
CVE-2024-4971
LearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2024-7382
Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
CVE-2024-6548
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
CVE-2024-4896
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
CVE-2024-2830
WordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-6461
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php