← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-9807
The Events Calendar <= 6.15.1 - Unauthenticated SQL Injection
CVE-2025-13066
Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
CVE-2025-12714
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification
CVE-2025-11262
Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-9322
Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection
CVE-2025-9321
WPCasa <= 1.4.1 - Unauthenticated Code Injection
CVE-2025-8994
WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'
CVE-2025-8422
Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
CVE-2025-8420
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
CVE-2025-8416
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection