← All credits
Usama Arshad
33 vulnerability records and advisories credit this contributor.
CVE-2026-92990
SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
CVE-2026-97331
User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access
CVE-2026-86816
WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
CVE-2026-96962
Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code
CVE-2026-86789
Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes
CVE-2026-96899
Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
CVE-2026-82850
Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure
CVE-2026-84026
Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint
CVE-2026-83555
Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification