← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-11964
User Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation
CVE-2026-11963
User Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOR
CVE-2026-10551
Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library
CVE-2026-12685
EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor
CVE-2026-12276
LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration
CVE-2025-8889
Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload
CVE-2026-12517
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Site Info Endpoint
CVE-2026-12516
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy
CVE-2026-12270
Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints
CVE-2026-11875
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery