← All credits
WPScan
4602 vulnerability records and advisories credit this contributor.
CVE-2026-86837
Bookly < 28.3 - Unauthenticated Customer PII Update via Verification Bypass
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
CVE-2026-88848
MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass
CVE-2026-78393
Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links
CVE-2026-78394
Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter
CVE-2026-78397
Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation
CVE-2026-74991
WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent
CVE-2026-80338
CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler
CVE-2026-80513
wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields
CVE-2026-82195
10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion