← All credits
Usama Arshad
28 vulnerability records and advisories credit this contributor.
CVE-2026-96899
Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
CVE-2026-82850
Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure
CVE-2026-83555
Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification
CVE-2026-84026
Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint
CVE-2026-85010
RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
CVE-2026-85009
RestroPress <= 3.4.6 - Unauthenticated Order Enumeration and Order Note Modification via Payment Recovery
CVE-2026-85349
FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
CVE-2026-91008
Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel
CVE-2026-87797
Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note