← All credits
Ryan Fabella
23 vulnerability records and advisories credit this contributor.
CVE-2026-92997
Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter
CVE-2026-107789
SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR
CVE-2026-107127
Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF
CVE-2026-105992
Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass
CVE-2026-106028
ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation
CVE-2026-94273
Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment
CVE-2026-91047
ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
CVE-2026-109930
MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key
CVE-2026-94261
Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Payment Confirmation Forgery via an Unbound Transaction Id
CVE-2026-88998
Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN