← All credits
Afan
3 vulnerability records and advisories credit this contributor.
CVE-2026-15341
User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters
CVE-2026-15303
6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter
CVE-2026-16635
Pronamic Pay <= 10.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms 'Update user role' Field