← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14819
Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move
CVE-2026-14545
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset
CVE-2026-9830
BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug
CVE-2026-14827
Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter
CVE-2026-14820
Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login
CVE-2026-14568
WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment Deletion
CVE-2026-14289
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
CVE-2026-14236
Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect
CVE-2026-14235
WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key
CVE-2026-14203
Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post Title