← All credits
Matthew Rollings
300 vulnerability records and advisories credit this contributor.
CVE-2026-5776
Email Encoder < 2.4.7 - Unauthenticated Stored XSS
CVE-2026-8071
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode Bypass
CVE-2026-7556
FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text
CVE-2026-10081
Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget
CVE-2026-10551
Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library
CVE-2026-5305
Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS
CVE-2025-0898
Xpro Elementor Addons - Pro <= 1.4.7 - Authenticated (Contributor+) Arbitrary File Read via Draw SVG
CVE-2026-3220
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
CVE-2026-2052
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
CVE-2026-5306
Check & Log Email < 2.0.13 - Unauthenticated Stored XSS