← All credits
Usama Arshad
28 vulnerability records and advisories credit this contributor.
CVE-2026-16737
WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart
CVE-2026-18789
Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes
CVE-2026-18786
CheckView < 2.3.2 - Administrator Account Creation via REST API Authentication Bypass
CVE-2026-16558
YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema
CVE-2026-16988
GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint
CVE-2026-16041
MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-18050
Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
CVE-2024-3681
Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting