GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

wesley (wcraft)

5 vulnerability records and advisories credit this contributor.

CVE-2026-4275
Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint
CVE-2026-5137
RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter
CVE-2025-2594
User Registration & Membership < 4.1.3 - Authentication Bypass
CVE-2025-2563
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
CVE-2025-6715
Latepoint < 5.1.94 - Unauthenticated LFI