← All credits
WPScan
3915 vulnerability records and advisories credit this contributor.
CVE-2026-14565
Advanced Customized Prompts <= 1.0.1 - Subscriber+ Stored XSS via Product Popup Configuration
CVE-2026-14566
Advanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata Tampering
CVE-2026-74925
MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator
CVE-2026-82305
YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title
CVE-2026-85677
Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content
CVE-2026-85678
AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
CVE-2026-86779
Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
CVE-2026-86780
Featured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text
CVE-2026-86781
SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
CVE-2026-86782
Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR