← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-84066
Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload
CVE-2026-84146
Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View
CVE-2026-19722
WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore
CVE-2026-10522
Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-77790
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
CVE-2026-14216
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
CVE-2026-16253
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
CVE-2025-15692
Icegram Express < 5.8.6 - Admin+ Stored XSS
CVE-2026-10821
Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
CVE-2026-14326
Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR