← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-16065
Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import
CVE-2026-18395
Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes
CVE-2026-16537
Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode
CVE-2026-13158
Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload
CVE-2026-13157
Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload
CVE-2026-12872
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
CVE-2026-16613
GDPR Cookie Compliance < 5.1.0 - Cookie Deletion and Forced Logout via CSRF
CVE-2026-16605
MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization
CVE-2026-15932
Support Genix Lite < 1.4.48 - Unauthenticated Arbitrary File Read via Path Traversal
CVE-2026-14197
Fluent Support < 2.3.1 - Agent+ Arbitrary Ticket Customer Reassignment via IDOR