← All credits
WPScan
4600 vulnerability records and advisories credit this contributor.
CVE-2026-107178
Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter
CVE-2026-107319
GamiPress < 8.0.6 - Subscriber+ Activity Log Disclosure
CVE-2026-107320
GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure
CVE-2026-107508
Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter
CVE-2026-107594
File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion
CVE-2026-108064
WP Encryption < 7.8.8.2 - Unauthenticated Certificate Private Key and ACME Order Replacement via wple_auto_handler
CVE-2026-108069
Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()
CVE-2026-85000
EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating
CVE-2026-85345
FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
CVE-2026-86787
Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive