← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2026-16256
Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
CVE-2026-16250
Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload
CVE-2026-16064
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
CVE-2026-16063
Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content
CVE-2026-16062
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content
CVE-2026-16060
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload
CVE-2026-16057
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
CVE-2026-16042
LWS Optimize < 3.4 - Subscriber+ Cache Deletion
CVE-2026-15939
Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API
CVE-2026-15932
Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path Traversal