← All credits
WPScan
3893 vulnerability records and advisories credit this contributor.
CVE-2026-83560
New User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key Bypass
CVE-2026-82127
Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
CVE-2026-80333
Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes
CVE-2026-75873
Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload
CVE-2026-75824
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
CVE-2026-75823
WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption
CVE-2026-100143
FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email
CVE-2025-15662
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
CVE-2025-15665
BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
CVE-2025-15678
Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload