← All credits
Colin Xu
94 vulnerability records and advisories credit this contributor.
CVE-2026-6228
Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form
CVE-2024-13706
WP Image Uploader <= 1.0.1 - Reflected Cross-Site Scripting
CVE-2024-13413
ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameter
CVE-2024-9937
Woo Manage Fraud Orders <= 2.6.1 - Reflected Cross-Site Scripting
CVE-2024-2024
Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload
CVE-2024-12258
WP Service Payment Form With Authorize.net <= 2.6.3 - Reflected Cross-Site Scripting
CVE-2024-12260
Ultimate Endpoints With Rest Api <= 2.2.2 - Reflected Cross-Site Scripting
CVE-2024-13534
Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection
CVE-2024-13404
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
CVE-2024-9384
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting