← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2026-94254
SellKit 2.3.5 - 2.7.0 - Unauthenticated Arbitrary Price Manipulation via 'sellkit_product_prices' Parameter
CVE-2026-92426
YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion
CVE-2026-92409
Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode
CVE-2026-91076
Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed
CVE-2026-90989
Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints
CVE-2026-108066
WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR
CVE-2026-106469
Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon
CVE-2026-103307
Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook
CVE-2026-104644
Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update
CVE-2026-104751
Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion