← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-81660
Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field
CVE-2026-81766
Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin
CVE-2026-77013
Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch
CVE-2026-12965
Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
CVE-2026-16739
Epeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation Forgery
CVE-2026-16061
Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}
CVE-2026-16259
Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
CVE-2026-16600
SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image
CVE-2026-16947
Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure
CVE-2026-17520
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key