← All credits
Farid Narimanov
33 vulnerability records and advisories credit this contributor.
CVE-2026-85038
B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection
CVE-2026-80311
Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR
CVE-2026-19715
WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File
CVE-2026-19711
Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request
CVE-2026-19728
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
CVE-2026-19726
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
CVE-2026-19714
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
CVE-2026-19712
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
CVE-2026-19088
ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication
CVE-2026-18945
WP Helper Premium < 4.7.6 - Unauthenticated Order Data Disclosure and Order Manipulation via Missing Order Key Validation