← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2025-15485
Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
CVE-2025-15481
Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
CVE-2026-82182
WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner Isolation
CVE-2026-16983
Gutentor < 4.0.6 - Subscriber+ Password Protected Post Password Disclosure via REST API
CVE-2026-16966
Solace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_content
CVE-2026-15232
Appointment Booking Lite < 2.4.8 - Unauthenticated Arbitrary Reservation Deletion
CVE-2026-14215
Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger
CVE-2026-12865
Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters
CVE-2026-12526
Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action
CVE-2025-15664
BEAF < 4.7.19 - Author+ Stored XSS via Before Label