← All credits
Khaled Alenazi (Nxploited)
59 vulnerability records and advisories credit this contributor.
CVE-2026-2446
Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update
CVE-2025-10406
BlindMatrix e-Commerce < 3.1 - Contributor+ LFI
CVE-2025-11191
RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
CVE-2025-12061
Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution
CVE-2025-10684
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plugin Activation
CVE-2025-13029
Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion
CVE-2025-12835
WooMulti <= 1.7 - Subscriber+ Arbitrary File Deletion
CVE-2025-12841
Bookit < 2.5.1 – Unauthenticated Settings Update
CVE-2025-11127
Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation
CVE-2025-10686
Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion