← All credits
Muni Nitish Kumar Yaddala
55 vulnerability records and advisories credit this contributor.
CVE-2026-12501
WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification
CVE-2026-17013
WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstart
CVE-2026-17008
Quick PayPal Payments <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN
CVE-2026-16990
Payment Button for PayPal <= 1.2.3.44 - Unauthenticated Payment Price Manipulation
CVE-2026-16986
Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters
CVE-2026-16650
Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass
CVE-2026-16621
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler
CVE-2026-15150
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
CVE-2026-14925
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
CVE-2026-14861
User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR