← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2026-77789
Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOR
CVE-2026-78146
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
CVE-2026-13406
Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure
CVE-2026-77000
WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
CVE-2026-77001
Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass
CVE-2026-77002
SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass
CVE-2026-16612
FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure
CVE-2026-16738
Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery
CVE-2026-18052
ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters
CVE-2026-19093
Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path