← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-87971
If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter
CVE-2026-87782
Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator
CVE-2026-86816
WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
CVE-2026-105316
Magee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode Actions
CVE-2026-104953
MPG < 4.2.3 - Editor+ SQLi via Project Import
CVE-2026-104678
CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update
CVE-2026-104677
WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP
CVE-2026-104667
Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order
CVE-2026-104653
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions
CVE-2026-104652
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Image ID