← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-12493
Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order
CVE-2026-12394
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-12255
MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration
CVE-2026-10082
Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter
CVE-2026-14603
WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection
CVE-2026-12981
CAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password Reset
CVE-2026-12877
Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter
CVE-2026-12690
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
CVE-2026-12689
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
CVE-2026-12688
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery