← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-89299
WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
CVE-2026-89302
Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter
CVE-2026-89304
Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter
CVE-2026-89305
Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter
CVE-2026-91829
Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
CVE-2026-93550
Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process
CVE-2026-96227
Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
CVE-2026-97183
WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers
CVE-2026-104752
Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import
CVE-2026-104753
Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter