← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-14929
JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR
CVE-2026-14602
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
CVE-2026-15054
Bit Form < 3.1.2 - Unauthenticated Inactive Form Submission
CVE-2026-15153
WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search
CVE-2026-15235
Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action
CVE-2026-11870
Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass
CVE-2026-13395
Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
CVE-2026-13345
Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table
CVE-2026-13178
Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation
CVE-2026-12500
WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update