← All credits
WPScan
3978 vulnerability records and advisories credit this contributor.
CVE-2026-14206
HT Contact Form < 2.9.3 - Unauthenticated Saved Form Draft Data Disclosure
CVE-2026-18946
Contact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filename
CVE-2026-19053
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
CVE-2026-16535
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
CVE-2026-14224
Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR
CVE-2026-14221
Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
CVE-2026-14188
Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure
CVE-2026-13692
PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering
CVE-2026-14223
Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR
CVE-2026-11974
Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download