← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-17563
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form
CVE-2026-19698
GutenKit < 2.5.1 - Contributor+ Stored CSS Injection
CVE-2026-2688
CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass
CVE-2026-4357
Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
CVE-2026-77009
WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console
CVE-2026-77793
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
CVE-2026-77794
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
CVE-2026-78153
Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route Normalization
CVE-2026-8151
Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF
CVE-2026-81571
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter