← All credits
WPScan
3921 vulnerability records and advisories credit this contributor.
CVE-2026-16259
Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
CVE-2026-16600
SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image
CVE-2026-16947
Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure
CVE-2026-17520
Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key
CVE-2026-17522
Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF
CVE-2026-18233
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion
CVE-2026-18234
MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet
CVE-2026-19430
CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all
CVE-2026-76546
Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode
CVE-2026-76547
Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export