← All credits
D.Sim
152 vulnerability records and advisories credit this contributor.
CVE-2025-8780
Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets
CVE-2025-9353
Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9203
Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields
CVE-2025-8444
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
CVE-2026-1216
RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter
CVE-2025-9992
Ghost Kit <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9352
Pronamic Google Maps <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9206
Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9204
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
CVE-2025-9123
CBX Map for Google Map & OpenStreetMap <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting