← All credits
Drew Webber
33 vulnerability records and advisories credit this contributor.
CVE-2026-2892
Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie
CVE-2026-2442
Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'
CVE-2025-14998
Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover
CVE-2025-4803
Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection
CVE-2026-2569
Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels
CVE-2026-2413
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
CVE-2025-31677
AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003
CVE-2024-13275
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039
CVE-2024-13266
Responsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030
CVE-2024-13299
Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065