← All credits
Khaled Alenazi (Nxploited)
59 vulnerability records and advisories credit this contributor.
CVE-2026-77002
SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass
CVE-2026-16576
Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API
CVE-2026-75860
JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update
CVE-2026-15215
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
CVE-2026-12872
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
CVE-2026-16256
Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
CVE-2026-16261
Huge IT Login <= 1.0.4 - Unauthenticated Account Takeover
CVE-2026-14483
Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command
CVE-2026-12255
MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration
CVE-2026-11961
User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID