← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2025-8280
Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-8085
Ditty < 3.1.58 - Unauthenticated SSRF
CVE-2025-15484
Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass
CVE-2025-12569
WP Front User Submit < 5.0.0 - Open Redirect
CVE-2025-15611
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
CVE-2025-15441
Form Maker < 1.15.38 - SQL Injection
CVE-2025-14804
Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion
CVE-2025-14545
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation
CVE-2026-97316
Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass
CVE-2025-10268
Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal