← All credits
Mutantgun
9 vulnerability records and advisories credit this contributor.
CVE-2026-93428
Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass
CVE-2026-92437
Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
CVE-2026-100143
FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email
CVE-2026-85081
Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
CVE-2026-80338
CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler
CVE-2026-19985
Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
CVE-2026-82846
Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields
CVE-2026-77826
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
CVE-2026-18056
HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator