← All credits
WPScan
3930 vulnerability records and advisories credit this contributor.
CVE-2026-15049
Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import
CVE-2026-13405
Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder
CVE-2026-19615
Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC
CVE-2026-19697
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
CVE-2026-19699
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
CVE-2026-74992
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
CVE-2026-75860
JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update
CVE-2026-17565
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
CVE-2026-16979
SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration
CVE-2026-16950
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products