← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2026-91046
ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
CVE-2026-91047
ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
CVE-2026-89286
FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File
CVE-2026-106014
Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery
CVE-2026-94273
Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment
CVE-2026-91074
BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute
CVE-2026-104246
Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments
CVE-2026-92433
Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
CVE-2026-92431
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
CVE-2026-92432
Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter