← All credits
Erwan LR (WPScan)
184 vulnerability records and advisories credit this contributor.
CVE-2026-13423
Streamit <= 4.5.0 - Unauthenticated Remote Code Execution via Arbitrary Function Call
CVE-2026-8935
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
CVE-2026-4375
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
CVE-2026-1969
ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload
CVE-2025-2942
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
CVE-2025-2929
Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS
CVE-2024-7354
Ninja Forms 3.8.6-3.8.10 - Reflected XSS
CVE-2024-6715
Ditty 3.1.39-3.1.45 - Author+ Stored XSS
CVE-2024-6529
Ultimate Classified Listings < 1.4 - Reflected XSS
CVE-2024-2405
Float menu < 6.0.1 - Menu Deletion via CSRF