← All credits
WPScan
4597 vulnerability records and advisories credit this contributor.
CVE-2026-105970
BCK Auto-confirm Bank Transfer <= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation
CVE-2026-106015
Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force
CVE-2026-109925
Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers
CVE-2026-110132
Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification
CVE-2026-110963
Userplace <= 1.2.0 - Unauthenticated Privilege Escalation
CVE-2026-97189
Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields
CVE-2026-97190
Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR
CVE-2026-97191
Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path
CVE-2025-15708
Live Composer < 2.1.23 - Admin+ Stored XSS via Partner Slug
CVE-2026-117525
FV Player < 7.5.57.7212 - Unauthenticated Stored XSS via Comment Popup