← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2026-88784
Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting
CVE-2026-92997
Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter
CVE-2026-92998
Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters
CVE-2026-92999
Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action
CVE-2026-96901
Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token
CVE-2026-101138
CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist
CVE-2026-103301
Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret
CVE-2026-104641
Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient
CVE-2026-104642
Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass
CVE-2026-105256
LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter