← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download
CVE-2026-8378
Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename
CVE-2026-8172
Simple Basic Contact Form <= 20250114 - Reflected XSS
CVE-2026-8163
Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter
CVE-2026-7842
Infility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter
CVE-2026-10530
Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token
CVE-2026-4110
Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list
CVE-2026-9822
WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers
CVE-2026-4259
Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions
CVE-2026-7859
Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_media