← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2025-15485
Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
CVE-2025-15489
Passster < 4.2.24 - Password Protection Bypass
CVE-2025-15490
Passster < 4.2.26 - Global Protection Bypass
CVE-2025-8945
Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST API
CVE-2025-9314
Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload
CVE-2026-2811
Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection
CVE-2026-82183
OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion
CVE-2026-82182
WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner Isolation
CVE-2025-15663
BEAF < 4.7.19 - Author+ Stored XSS via After Label
CVE-2025-15664
BEAF < 4.7.19 - Author+ Stored XSS via Before Label