← All credits

Muni Nitish Kumar Yaddala

78 vulnerability records and advisories credit this contributor.

CVE-2026-124815

Clockinator Lite < 1.1.0 - Unauthenticated SQLi via Record Deletion Actions

CVE-2026-110959

Descope < 1.2.0 - Unauthenticated Account Takeover

CVE-2026-119033

Schema & Structured Data for WP & AMP < 1.70 - Contributor+ Structured Data Modification of Other Users' Posts via IDOR

CVE-2026-110949

Download Manager (Free & Pro) - Unauthenticated Missing Authorization via Password Validation

CVE-2026-121848

Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation

CVE-2026-118530

Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action

CVE-2026-115212

mView <= 1.0.3 - Subscriber+ Arbitrary File Upload

CVE-2026-107775

Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation

CVE-2026-110525

MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent

CVE-2026-115230

WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password Reset