← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2026-107447
Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity
CVE-2026-14556
HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer
CVE-2026-85683
Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL
CVE-2026-96903
Easy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX Handlers
CVE-2026-96902
Easy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST API
CVE-2026-103311
Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret
CVE-2026-106010
BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery
CVE-2026-110034
Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code
CVE-2026-74921
Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes
CVE-2026-74922
Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass