← All credits
Khayal Farzaliyev
40 vulnerability records and advisories credit this contributor.
CVE-2024-13411
Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
CVE-2025-1294
eForm <= 4.18.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-0511
Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter
CVE-2024-4347
WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) Arbitrary File Deletion
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2024-11728
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
CVE-2024-12067
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
CVE-2024-11024
AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset
CVE-2024-12771
eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset