← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2022-0287
Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure
CVE-2022-0229
miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion
CVE-2022-0220
WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting
CVE-2022-0214
Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service
CVE-2022-0188
Coming Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update
CVE-2022-0164
Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed Users
CVE-2022-0140
Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
CVE-2024-2872
Swift Framework < 2024.04.30 - Contributor+ Stored XSS
CVE-2023-7232
Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure
CVE-2024-5595
Essential Blocks < 4.7.0 - Contributor+ Stored XSS