← All credits
WPScan
3994 vulnerability records and advisories credit this contributor.
CVE-2026-16968
GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users
CVE-2026-16942
WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS
CVE-2026-15210
Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute Force
CVE-2026-16561
Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure
CVE-2026-16573
Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload
CVE-2026-16993
DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory
CVE-2025-15677
GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories
CVE-2026-16055
Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login
CVE-2026-17515
MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item
CVE-2026-14920
AcyMailing < 10.11.1 - Unauthenticated SQL Injection via subscription[] Parameter