← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-16289
ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group
CVE-2026-16297
Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import
CVE-2026-16300
Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset
CVE-2026-16572
LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie
CVE-2026-15048
GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History
CVE-2026-14931
JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure
CVE-2026-14930
JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload
CVE-2026-15209
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR
CVE-2026-15258
Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
CVE-2026-14928
JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject