← All credits
Md. Minaruzzaman Shovon
8 vulnerability records and advisories credit this contributor.
CVE-2026-105998
Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization
CVE-2026-85678
AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
CVE-2026-84021
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL
CVE-2026-15049
Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import
CVE-2026-15048
GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History
CVE-2026-14821
Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion
CVE-2026-14322
Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method
CVE-2026-10749
Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData