← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-16032
LWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User Monitoring
CVE-2026-18465
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
CVE-2026-18464
WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service
CVE-2026-17541
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
CVE-2026-17542
Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
CVE-2026-17019
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
CVE-2026-18470
Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response
CVE-2026-17010
Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta
CVE-2026-17017
CubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relation
CVE-2026-13701
Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting