← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-104028
Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE
CVE-2026-104680
Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard
CVE-2026-104681
Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field
CVE-2026-104682
Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route
CVE-2026-104684
Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
CVE-2026-106029
WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion
CVE-2026-107507
Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit
CVE-2026-107694
Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint
CVE-2026-14854
WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service
CVE-2026-81153
Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta