← All credits
WPScan
3829 vulnerability records and advisories credit this contributor.
CVE-2023-5884
Word Balloon < 4.20.3 - Avatar Removal via CSRF
CVE-2023-5799
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
CVE-2023-5749
EmbedPress < 3.9.2 - Reflected XSS
CVE-2023-5750
EmbedPress < 3.9.2 - Reflected XSS
CVE-2023-5762
Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar ext
CVE-2023-5737
WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update
CVE-2023-5645
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint
CVE-2023-5757
WP Crowdfunding < 2.1.8 - Admin+ Stored XSS
CVE-2023-5611
Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import
CVE-2023-5738
WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS