← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2026-13613
KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint
CVE-2026-13171
Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint
CVE-2026-13168
Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API
CVE-2026-15388
Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log Disclosure
CVE-2026-16051
WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action
CVE-2026-16294
Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL
CVE-2026-12976
LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant
CVE-2026-14315
Pixel Tag Manager for WooCommerce < 2.2.1 - Unauthenticated Forged Conversion Event Submission
CVE-2026-14549
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion
CVE-2026-14548
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update