← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-12497
ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection
CVE-2026-4338
ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
CVE-2025-15609
Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure
CVE-2026-5776
Email Encoder < 2.4.7 - Unauthenticated Stored XSS
CVE-2026-7385
Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure
CVE-2026-9577
Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
CVE-2026-9066
WP Compress < 7.10.04 - Reflected XSS via test_zone
CVE-2026-14291
Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa
CVE-2026-12082
Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)
CVE-2026-8935
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation