← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-11869
WP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request
CVE-2026-11571
Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts
CVE-2026-10834
WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image
CVE-2026-12378
BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection
CVE-2026-12277
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal
CVE-2026-4375
DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
CVE-2026-12375
Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server
CVE-2026-6382
Multiple elFinder Plugins - Authenticated OS Command Injection
CVE-2026-12083
Admin and Site Enhancements < 8.8.4 - Unauthenticated Administrator-Role Restoration via reset-for Parameter
CVE-2026-11962
FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations