← All credits
WPScan
3309 vulnerability records and advisories credit this contributor.
CVE-2026-78363
MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags
CVE-2026-74916
WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters
CVE-2026-13611
KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure
CVE-2026-81766
Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin
CVE-2026-81660
Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field
CVE-2026-81346
Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion
CVE-2026-81342
MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect
CVE-2026-81200
MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR
CVE-2026-81026
MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN
CVE-2026-80488
WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields