← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2026-77794
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
CVE-2026-77793
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
CVE-2026-77792
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
CVE-2026-77788
Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas
CVE-2026-77787
Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk
CVE-2026-77785
Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API
CVE-2026-77784
Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_as
CVE-2026-77783
Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content Disclosure
CVE-2026-77782
Rank Math SEO < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure via Post Metadata and llms.txt
CVE-2026-77764
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners