← All credits
WPScan
4010 vulnerability records and advisories credit this contributor.
CVE-2026-13168
Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API
CVE-2026-12983
Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection
CVE-2026-12976
LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant
CVE-2026-11565
Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
CVE-2026-14224
Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR
CVE-2026-14223
Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR
CVE-2026-14222
Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization
CVE-2026-14221
Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
CVE-2026-14188
Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure
CVE-2026-13692
PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering