← All credits
Yaswanth Reddy Sunkara
38 vulnerability records and advisories credit this contributor.
CVE-2026-11361
Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
CVE-2026-16268
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
CVE-2026-16065
Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import
CVE-2026-16060
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload
CVE-2026-16292
Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF
CVE-2026-16062
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content
CVE-2026-12698
wpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment
CVE-2026-14292
WordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package Title
CVE-2026-16064
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
CVE-2026-16063
Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content