← All credits
Pedro Pinho
59 vulnerability records and advisories credit this contributor.
CVE-2026-91078
TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
CVE-2026-84169
UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery
CVE-2026-84091
SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN
CVE-2026-86783
PostX < 5.0.41 - Unauthenticated Custom Field Key Disclosure via REST API
CVE-2026-86814
UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email
CVE-2026-91017
Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback
CVE-2026-91016
Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
CVE-2026-85350
UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together
CVE-2026-87896
Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route
CVE-2026-87918
WPBot < 8.5.7 - Unauthenticated AI Provider API Abuse via Multiple AJAX Actions