← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-11880
Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR
CVE-2026-11794
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
CVE-2026-11570
User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name
CVE-2026-11568
Product Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_data
CVE-2026-11562
WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update
CVE-2026-10750
Royal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools
CVE-2026-11590
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection via filter[elements] Array Keys
CVE-2026-11589
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored XSS via File Upload
CVE-2026-9576
Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export
CVE-2026-11581
Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption