← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2024-10075
Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution
CVE-2024-10054
Happyforms < 1.26.3 - Admin+ Stored XSS
CVE-2024-10027
WP Booking Calendar < 10.6.3 - Admin+ Stored XSS
CVE-2024-10010
LearnPress < 4.2.7.2 - Admin+ Stored XSS
CVE-2024-10009
Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection
CVE-2024-0974
Social Media Widget < 4.0.9 - Admin+ Stored XSS
CVE-2024-0973
Widget for Social Page Feeds < 6.4 - Admin+ Stored XSS
CVE-2024-0970
User Activity Tracking and Log < 4.1.4 - IP Spoofing
CVE-2024-0951
Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS
CVE-2024-0905
Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting