← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14922
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
CVE-2026-14921
Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode
CVE-2026-14845
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
CVE-2026-14834
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
CVE-2026-14554
Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
CVE-2026-14319
GiveWP < 4.16.3 - Unauthenticated Recurring Donor Information Disclosure
CVE-2026-15381
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
CVE-2026-8155
BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR
CVE-2026-13393
ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite)
CVE-2026-12376
Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint