← All credits
WPScan
4662 vulnerability records and advisories credit this contributor.
CVE-2026-1508
Court Reservation < 1.10.9 - Event Deletion via CSRF
CVE-2026-2446
Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update
CVE-2025-15033
WooCommerce - Subscriber/Customer+ Order Data Disclosure
CVE-2026-2025
Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
CVE-2024-0756
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection
CVE-2025-15386
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS
CVE-2026-1368
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
CVE-2026-0929
RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
CVE-2025-15520
RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure
CVE-2025-15030
User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset