← All credits
Vaibhav Narkhede
15 vulnerability records and advisories credit this contributor.
CVE-2026-16567
Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle
CVE-2026-14931
JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure
CVE-2026-13329
WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund
CVE-2026-17014
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
CVE-2026-17011
Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection
CVE-2026-16968
GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users
CVE-2026-16548
Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint
CVE-2026-77758
Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
CVE-2026-77754
Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
CVE-2026-16984
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure