← All credits
WPScan
3974 vulnerability records and advisories credit this contributor.
CVE-2026-18934
RSS Aggregator by Feedzy < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion
CVE-2026-16985
Squeeze < 1.7.12 - Author+ Arbitrary File Upload
CVE-2026-16949
Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup
CVE-2026-15238
Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR
CVE-2026-15237
Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint
CVE-2026-14941
Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
CVE-2026-14860
Podcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery
CVE-2026-13600
AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron
CVE-2026-12971
LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature
CVE-2026-17018
CubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR