← All credits
WPScan
4010 vulnerability records and advisories credit this contributor.
CVE-2026-15382
Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts
CVE-2026-15255
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
CVE-2026-15257
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification
CVE-2026-15252
Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
CVE-2026-15250
LatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel
CVE-2026-15240
Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution
CVE-2026-14318
GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings
CVE-2026-14231
LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts
CVE-2026-14923
Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification
CVE-2026-12687
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID