← All credits
LionTree
9 vulnerability records and advisories credit this contributor.
CVE-2025-12471
Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting
CVE-2025-12473
RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
CVE-2025-11735
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
CVE-2025-12002
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
CVE-2025-14800
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
CVE-2025-11536
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
CVE-2025-8877
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
CVE-2025-12497
Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
CVE-2025-12560
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url