← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2025-9344
UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9873
a3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-6448
Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure
CVE-2024-5574
WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-6554
Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure
CVE-2024-13808
Xpro Elementor Addons - Pro <= 1.4.9 - Authenticated (Contributor+) Remote Code Execution
CVE-2024-4035
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scripting
CVE-2024-4486
Awesome Contact Form7 for Elementor <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AEP Contact Form 7 Widget
CVE-2024-5345
Responsive Owl Carousel for Elementor <= 1.2.0 - Local File Inclusion
CVE-2024-6559
XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure