← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-16290
ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group
CVE-2026-16954
AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens
CVE-2026-18050
Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
CVE-2026-14829
Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret
CVE-2026-14313
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR
CVE-2026-14314
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR
CVE-2026-14240
Tourmaster < 5.4.9 - Unauthenticated Sensitive Data Disclosure via Order Export
CVE-2026-14547
Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request Form
CVE-2026-16268
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
CVE-2026-11588
EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation