← All credits
Shivamani Vastrala
36 vulnerability records and advisories credit this contributor.
CVE-2026-77766
Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint
CVE-2026-81340
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
CVE-2026-81348
My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap
CVE-2026-15247
Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
CVE-2026-78153
Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route Normalization
CVE-2026-77764
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners
CVE-2026-15385
RT Mega Menu < 1.5.2 - Subscriber+ Stored XSS via Menu Item CSS
CVE-2026-15383
Blog Floating Button <= 1.4.20 - Unauthenticated Stored XSS via User-Agent Header
CVE-2026-15262
Admin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value Column
CVE-2026-14930
JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload