← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14190
Sina Extension for Elementor < 3.10.2 - Reflected XSS
CVE-2026-14189
WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
CVE-2026-13726
Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode
CVE-2026-13714
Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
CVE-2026-13597
QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover
CVE-2026-13400
Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information
CVE-2026-13390
The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation
CVE-2026-13332
Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)
CVE-2026-13152
Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation
CVE-2026-12982
Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery