← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-16253
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
CVE-2025-15692
Icegram Express < 5.8.6 - Admin+ Stored XSS
CVE-2026-10821
Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
CVE-2026-14326
Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR
CVE-2026-17563
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form
CVE-2026-19698
GutenKit < 2.5.1 - Contributor+ Stored CSS Injection
CVE-2026-2688
CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass
CVE-2026-4357
Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
CVE-2026-77009
WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console
CVE-2026-77793
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field