← All credits
WPScan
3954 vulnerability records and advisories credit this contributor.
CVE-2026-16621
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler
CVE-2026-16747
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
CVE-2026-16990
Payment Button for PayPal <= 1.2.3.44 - Unauthenticated Payment Price Manipulation
CVE-2026-17008
Quick PayPal Payments <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN
CVE-2026-18044
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch
CVE-2026-19077
Copy & Delete Posts < 1.5.5 - Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization
CVE-2026-19075
All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter
CVE-2026-14211
Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR
CVE-2026-17023
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback
CVE-2026-19049
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie