← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-80440
Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders
CVE-2026-19855
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text
CVE-2026-85418
Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget
CVE-2025-15694
Joli Table Of Contents 2.0.0 - 2.8.0 - Admin+ Stored XSS
CVE-2026-15247
Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
CVE-2026-84931
Joli Table Of Contents < 3.0.3 - Author+ Stored XSS via joli-toc Shortcode Theme Attribute
CVE-2026-13159
Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation
CVE-2026-18480
SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover
CVE-2026-75793
SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login
CVE-2026-84028
Bold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settings