← All credits
PRISM
80 vulnerability records and advisories credit this contributor.
CVE-2026-12920
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
CVE-2026-13252
RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute
CVE-2026-13357
Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
CVE-2026-12134
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action
CVE-2026-14029
Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter
CVE-2026-12133
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action
CVE-2026-13731
WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
CVE-2026-12113
Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
CVE-2026-13015
WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameter
CVE-2026-12923
Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter