← All credits
Chloe Chamberland, Wordfence
19 vulnerability records and advisories credit this contributor.
CVE-2022-2431
Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
CVE-2022-0653
Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting
CVE-2022-0218
WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route
CVE-2022-0215
XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update
CVE-2021-4073
RegistrationMagic <= 5.0.1.7 Authentication Bypass
CVE-2021-42367
Variation Swatches for WooCommerce <= 2.1.1 Authenticated Stored Cross-Site Scripting
CVE-2021-42363
Preview E-Mails for WooCommerce <= 1.6.8 Reflected Cross-Site Scripting
CVE-2021-39341
OptinMonster <= 2.6.4 Unprotected REST-API Endpoints
CVE-2021-39321
Sassy Social Share 3.3.23 PHP Object Injection
CVE-2021-39317
AccessPress Themes - Authenticated Malicious File Upload