← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2026-14212
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
CVE-2026-14550
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
CVE-2026-16984
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure
CVE-2026-16986
Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters
CVE-2026-19094
Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters
CVE-2026-19220
Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation
CVE-2026-19226
Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings
CVE-2026-19718
BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery
CVE-2026-74851
Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback
CVE-2026-74928
WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes