← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-91832
WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF
CVE-2026-92424
Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue
CVE-2026-92994
Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
CVE-2026-93580
InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
CVE-2026-94297
Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation
CVE-2026-96886
Course Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export
CVE-2026-75873
Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload
CVE-2026-11871
Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details
CVE-2026-89303
Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter