← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-19085
Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure
CVE-2026-19435
Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure
CVE-2026-75796
AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools
CVE-2026-16575
Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint
CVE-2026-14601
Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
CVE-2026-14325
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting
CVE-2025-15671
Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter
CVE-2026-16962
Tamara Checkout <= 1.9.9.20 - Unauthenticated Order Status Manipulation
CVE-2026-13736
NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API
CVE-2026-15046
LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF