← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-84044
Restaurant Menu and Food Ordering < 2.4.12 - Unauthenticated Payment Bypass via Forged PayPal IPN
CVE-2025-15691
WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms
CVE-2026-16281
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
CVE-2026-17517
Content Views < 4.5.1.2 - Unauthenticated Non-Public Post Content Disclosure via Views Status Filter
CVE-2026-19224
Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
CVE-2026-74853
Pods < 3.3.9.2 - Author+ Arbitrary File Read via Shortcode Display Callback
CVE-2026-79630
WPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution
CVE-2026-79631
WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files
CVE-2026-79632
WPFunnels < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission
CVE-2026-80438
Ninja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST API