← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14183
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
CVE-2026-13694
Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass
CVE-2026-13693
Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal
CVE-2026-13142
Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force
CVE-2026-12973
PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification
CVE-2026-12972
PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering
CVE-2026-11767
CRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact Form
CVE-2026-10755
All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration
CVE-2026-10724
Reviews Feed < 2.6.5 - Unauthenticated Stored Arbitrary Shortcode Execution via Google Reviews
CVE-2026-10081
Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget