← All credits
VulnCheck
340 vulnerability records and advisories credit this contributor.
CVE-2026-66047
ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE
CVE-2026-75486
Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name
CVE-2026-72001
Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint
CVE-2026-71511
Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints
CVE-2026-71510
Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter
CVE-2026-71509
Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
CVE-2026-71508
Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint
CVE-2026-71507
Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes
CVE-2026-71506
Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint
CVE-2026-71505
Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Route