← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-19842
SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
CVE-2026-19782
WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users
CVE-2026-19728
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
CVE-2026-19726
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
CVE-2026-19725
WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect
CVE-2026-19718
BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery
CVE-2026-19717
CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
CVE-2026-19714
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
CVE-2026-19712
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
CVE-2026-19711
Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request