← All credits
Shikhali Jamalzade
26 vulnerability records and advisories credit this contributor.
CVE-2026-75861
Ultimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized Redemption
CVE-2026-74927
MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint
CVE-2026-79621
CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient
CVE-2026-19430
CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all
CVE-2026-77701
WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders
CVE-2026-79615
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR
CVE-2026-78125
LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure
CVE-2026-78137
StoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-Cart
CVE-2026-78138
Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html
CVE-2026-78139
Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDOR