← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2024-2262
WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
CVE-2024-3590
LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
CVE-2024-6843
SmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS
CVE-2024-6847
SmartSearch WP <= 2.4.4 - Unauthenticated SQLi
CVE-2024-6451
AI Engine < 2.5.1 - Admin+ RCE
CVE-2024-6330
GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI
CVE-2024-6134
WP eStore < 8.5.6 - Reflected XSS in Product Editing
CVE-2024-6724
Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS
CVE-2024-6158
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
CVE-2023-7247
Login as User or Customer <= 3.8 - Admin Account Takeover