← All credits
WPScan
4165 vulnerability records and advisories credit this contributor.
CVE-2026-97314
ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection
CVE-2026-92433
Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
CVE-2026-92432
Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter
CVE-2026-92431
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
CVE-2026-91074
BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute
CVE-2026-81344
Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection
CVE-2026-81343
Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
CVE-2026-110527
WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass
CVE-2026-106470
WP Data Access < 5.5.88 - Subscriber+ SSRF
CVE-2026-104246
Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments