← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2025-6991
Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-7418
The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure
CVE-2026-2430
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes
CVE-2024-4313
Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
CVE-2025-6744
Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-5091
SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets
CVE-2024-4212
Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2025-7956
Ajax Search Lite <= 4.13.1 - Missing Authorization to Unauthenticated Basic Information Exposure via ASL_Query in AJAX Search Handler
CVE-2024-5260
Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter