← All credits
nudien
5 vulnerability records and advisories credit this contributor.
CVE-2026-19952
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
CVE-2026-18855
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
CVE-2026-7444
Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery
CVE-2026-8678
MyParcel <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions
CVE-2026-4298
DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset