← All credits
Michael Mazzolini
119 vulnerability records and advisories credit this contributor.
CVE-2025-12714
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification
CVE-2025-11262
Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
CVE-2025-2276
Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation
CVE-2025-10289
Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection
CVE-2025-2056
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
CVE-2025-5282
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2025-12192
The Events Calendar <= 6.15.9 - Sysinfo Key Incorrect Comparison to Unauthenticated Sensitive Information Exposure
CVE-2024-13557
Shortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution