← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-77794
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
CVE-2026-78153
Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route Normalization
CVE-2026-8151
Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF
CVE-2026-81571
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
CVE-2026-82884
All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block
CVE-2026-83533
WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment
CVE-2026-83547
Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets
CVE-2023-3360
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
CVE-2024-3773
LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode
CVE-2025-15481
Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure