← All credits
Abdullah Kareem
14 vulnerability records and advisories credit this contributor.
CVE-2026-117588
WP Google Review Slider < 18.11 - Google API Settings Update via CSRF
CVE-2026-104648
weMail <= 2.1.6 - Editor+ API Key Disclosure
CVE-2026-104644
Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update
CVE-2026-89190
Robin Image Optimizer < 2.0.8 - Subscriber+ Plugin Settings Disclosure via fy_ajax
CVE-2026-86602
WP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_preview
CVE-2026-86603
WP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_lists
CVE-2026-82305
YITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title
CVE-2026-79631
WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files
CVE-2026-81194
MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter
CVE-2026-81195
MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route