← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-15384
Manual Image Crop < 1.15 - Subscriber+ Arbitrary Attachment Image Overwrite via IDOR
CVE-2026-15253
Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title
CVE-2026-15249
Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link
CVE-2026-15213
Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass via Forged Settlement Callback
CVE-2026-15205
Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
CVE-2026-15150
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
CVE-2026-15049
Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import
CVE-2026-15046
LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF
CVE-2026-15045
Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount
CVE-2026-15039
Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload