← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14322
Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method
CVE-2026-12987
Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration
CVE-2026-12968
Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload
CVE-2026-6858
Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS
CVE-2026-9278
Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure
CVE-2026-9062
Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal
CVE-2026-9061
Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name
CVE-2026-8082
Bpost Shipping Platform < 3.2.3 - Unauthenticated SQL Injection
CVE-2026-14185
WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update
CVE-2026-14184
Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR