← All credits
AmrAwad
30 vulnerability records and advisories credit this contributor.
CVE-2024-4295
Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash
CVE-2024-3961
ConvertKit <= 2.4.9 - Missing Authorization
CVE-2024-3549
Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection
CVE-2024-3473
Header Footer Code Manager Pro <= 1.0.16 - Reflected Cross-Site Scripting via message
CVE-2024-3469
GP Premium <= 2.4.0 - Reflected Cross-Site Scripting
CVE-2024-3240
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
CVE-2024-3235
Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
CVE-2024-2931
WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure
CVE-2024-2846
Visual Footer Credit Remover <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-2508
WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification