← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-9677
Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting
CVE-2026-9676
f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification
CVE-2026-10820
ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR
CVE-2026-10083
APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution
CVE-2026-8380
Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion
CVE-2026-10835
SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection
CVE-2026-10823
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
CVE-2026-9710
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
CVE-2026-9709
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure
CVE-2026-10753
Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update