← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-8089
weMail < 2.1.3 - Reflected Cross-Site Scripting
CVE-2026-7850
WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute
CVE-2026-9271
KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS
CVE-2026-9269
Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter
CVE-2026-7862
Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation
CVE-2026-6495
Ajax Load More < 7.8.4 - Reflected XSS
CVE-2026-6433
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE
CVE-2026-6381
WP Maps < 4.9.3 - Subscriber+ Local File Inclusion
CVE-2026-6379
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter
CVE-2026-6268
EventPress < 22.2 – Reflected Cross-Site Scripting