← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-14313
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR
CVE-2026-14306
Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass
CVE-2026-14293
Autopay / Blue Media for WooCommerce < 5.0.1 - Unauthenticated Stored XSS via CSS Editor
CVE-2026-14240
Tourmaster < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Export
CVE-2026-14238
Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report
CVE-2026-14237
Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation
CVE-2026-14225
Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass
CVE-2026-14211
Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR
CVE-2026-14206
HT Contact Form < 2.9.3 - Unauthenticated Saved Form Draft Data Disclosure
CVE-2026-14205
WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter