← All credits
WPScan
3872 vulnerability records and advisories credit this contributor.
CVE-2026-85349
FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
CVE-2026-85530
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
CVE-2026-85569
Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification
CVE-2026-85572
Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure
CVE-2026-85641
Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter
CVE-2026-86444
LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
CVE-2026-86445
LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax
CVE-2026-86447
LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax
CVE-2026-86448
LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order
CVE-2026-86449
LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API