← All credits
Tonn
89 vulnerability records and advisories credit this contributor.
CVE-2025-6381
BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion
CVE-2025-6379
BeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion
CVE-2025-6366
Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation
CVE-2025-3101
Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation
CVE-2025-3076
Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-3075
Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-2238
Vikinger <= 1.9.30 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax'
CVE-2025-2237
WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'
CVE-2025-2232
Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user'
CVE-2025-2103
SoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options Update