← All credits
WPScan
4597 vulnerability records and advisories credit this contributor.
CVE-2026-110983
WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF
CVE-2026-111739
Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter
CVE-2026-113616
LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset
CVE-2026-113617
Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal
CVE-2026-114270
GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure
CVE-2026-115245
Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload
CVE-2026-115259
Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR
CVE-2026-86794
Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form
CVE-2026-85007
YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax
CVE-2026-115303
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping