← All credits
WPScan
4073 vulnerability records and advisories credit this contributor.
CVE-2026-14926
FluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOR
CVE-2026-9830
BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug
CVE-2026-14827
Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter
CVE-2026-14820
Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login
CVE-2026-14568
WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment Deletion
CVE-2026-14289
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
CVE-2026-14236
Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect
CVE-2026-12493
Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order
CVE-2026-14203
Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post Title
CVE-2026-14190
Sina Extension for Elementor < 3.10.2 - Reflected XSS