← All credits
Yaswanth Reddy Sunkara
38 vulnerability records and advisories credit this contributor.
CVE-2026-15260
Geo My WP < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR
CVE-2026-15931
Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name
CVE-2026-14929
JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR
CVE-2026-11870
Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass
CVE-2026-12592
SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header
CVE-2026-11567
SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
CVE-2026-12583
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field
CVE-2026-11360
Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter