← All credits
WPScan
3924 vulnerability records and advisories credit this contributor.
CVE-2026-78333
12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log
CVE-2026-74932
WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning
CVE-2026-13172
Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure
CVE-2026-13404
Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init
CVE-2026-14212
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
CVE-2026-14550
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
CVE-2026-16984
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure
CVE-2026-16986
Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters
CVE-2026-19094
Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters
CVE-2026-19220
Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation