← All credits
nthng
8 vulnerability records and advisories credit this contributor.
CVE-2026-91862
Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
CVE-2026-94573
Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
CVE-2026-93368
Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
CVE-2026-15162
Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection
CVE-2026-16143
VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-15918
VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
CVE-2026-14500
Bulk Order Update for WooCommerce <= 1.6 - Unauthenticated Arbitrary File Read via 'csv_url' Parameter
CVE-2026-14489
WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter