← All credits
WPScan
4662 vulnerability records and advisories credit this contributor.
CVE-2025-9978
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
CVE-2025-11191
RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
CVE-2025-12057
WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload
CVE-2025-12061
Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution
CVE-2025-12954
Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDOR
CVE-2025-10684
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plugin Activation
CVE-2025-14803
Nex-Forms Express WP Form Builder < 9.1.8 - Authenticated Stored XSS
CVE-2025-14719
Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
CVE-2025-14804
Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion
CVE-2025-13820
Comments – wpDiscuz < 7.6.40 - Unauthenticated Account Takeover