← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2025-15663
BEAF < 4.7.19 - Author+ Stored XSS via After Label
CVE-2024-3773
LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode
CVE-2023-3360
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
CVE-2026-77790
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
CVE-2026-19722
WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore
CVE-2026-10522
Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator
CVE-2026-16253
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
CVE-2026-78363
MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags
CVE-2026-74916
WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters
CVE-2026-13611
KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure