← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2025-14072
Ninja Forms < 3.13.3 - Unauthenticated Token Generation and Submission Disclosure
CVE-2025-13820
Comments – wpDiscuz < 7.6.40 - Unauthenticated Account Takeover
CVE-2025-13471
User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update
CVE-2025-13456
Shopbuilder < 3.2.2 - Reflected XSS
CVE-2025-13407
GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload
CVE-2025-13307
Ocean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal Conditions
CVE-2025-13153
Logo Slider < 4.9.0 - Contributor+ Stored XSS
CVE-2025-13029
Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion
CVE-2025-13001
Donation <= 1.0 - Admin+ SQLi
CVE-2025-13000
DB Access <= 0.8.7 - Subscriber+ SQLi