← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2024-6158
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
CVE-2023-7247
Login as User or Customer <= 3.8 - Admin Account Takeover
CVE-2023-6585
JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE
CVE-2024-1564
Schema Pro < 2.7.16 - Contributor+ Custom Field Access
CVE-2024-0868
coreActivity < 2.1 - Unauthenticated IP Spoofing
CVE-2023-7201
Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload
CVE-2024-1306
Smart Forms < 2.6.94 - Edit Entries via CSRF
CVE-2024-1232
CM Download Manager < 2.9.0 - Download Deletion via CSRF
CVE-2024-2429
Salon booking system <= 9.6.5 - Settings Update via CSRF
CVE-2024-3921
Gianism <= 5.1.0 - Admin+ Stored XSS