← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-12271
Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR
CVE-2026-12274
Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR
CVE-2026-12275
Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration
CVE-2026-12396
WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection
CVE-2026-12397
WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR
CVE-2026-12582
Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id
CVE-2026-12685
EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor
CVE-2026-12276
LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration
CVE-2026-10834
WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image
CVE-2026-12516
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy