← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2026-96886
Course Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export
CVE-2026-94297
Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
CVE-2026-93580
InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
CVE-2026-92994
Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
CVE-2026-92424
Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue
CVE-2026-91832
WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF
CVE-2026-91072
EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
CVE-2026-91051
EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta
CVE-2026-90953
Image Optimizer by Elementor < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission Callbacks