← All credits
Karthik Ramakrishnan
40 vulnerability records and advisories credit this contributor.
CVE-2026-104646
Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes
CVE-2026-96530
Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
CVE-2026-104653
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions
CVE-2026-91072
EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
CVE-2026-89003
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview
CVE-2026-89001
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings
CVE-2026-78394
Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter
CVE-2026-78393
Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links
CVE-2026-93662
Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter
CVE-2026-89004
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR