← All credits

WPScan

4597 vulnerability records and advisories credit this contributor.

CVE-2026-115205

AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item

CVE-2026-105993

DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update

CVE-2026-106004

DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation

CVE-2026-105967

Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter

CVE-2026-103379

WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token

CVE-2026-104648

weMail <= 2.1.6 - Editor+ API Key Disclosure

CVE-2026-104647

weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()

CVE-2026-101165

Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Payment Surcharge Bypass via update_surcharge_order_pay

CVE-2026-101166

Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_order

CVE-2026-104719

CookieYes < 3.5.8 - Contributor+ Stored XSS via Cookie Category Scripts