← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2023-7252
Tickera < 3.5.2.5 - Ticket leakage through IDOR
CVE-2024-2118
Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings
CVE-2024-10482
Media Library Tools < 1.5.0 - Author+ Stored XSS via SVG
CVE-2024-5029
CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
CVE-2023-5672
WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint
CVE-2023-5882
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
CVE-2023-5874
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
CVE-2023-5974
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
CVE-2023-5560
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
CVE-2023-4252
EventPrime <= 3.2.9 - Booking Pricing Bypass