← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14222
Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization
CVE-2026-14221
Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
CVE-2026-14188
Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure
CVE-2026-13692
PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering
CVE-2026-11974
Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download
CVE-2026-14226
Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing
CVE-2026-14239
Tourmaster < 5.4.8 - Stored XSS via CSRF
CVE-2026-14602
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
CVE-2026-15235
Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action
CVE-2026-15153
WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search