← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2026-18046
Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update
CVE-2026-15249
Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link
CVE-2026-16066
Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Name
CVE-2026-16977
Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_name
CVE-2026-17013
WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstart
CVE-2026-18049
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
CVE-2026-18057
Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection
CVE-2026-18230
WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter
CVE-2026-19217
Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget
CVE-2026-15229
Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation