← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-84169
UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery
CVE-2026-13607
File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access
CVE-2026-78371
File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure
CVE-2026-101159
WP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review Submission
CVE-2026-101160
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review Rating
CVE-2026-101161
WP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews Shortcode
CVE-2026-101162
WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings
CVE-2026-103293
MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import
CVE-2026-103514
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
CVE-2026-80517
WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload