← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-80518
WP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log Path
CVE-2026-85015
Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal
CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter
CVE-2026-86832
MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API
CVE-2026-86834
MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration
CVE-2026-88782
Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute
CVE-2026-88783
Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content
CVE-2026-89236
SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters
CVE-2026-91078
TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
CVE-2026-92437
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion