← All credits
Duy Tran
10 vulnerability records and advisories credit this contributor.
CVE-2026-86442
WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR
CVE-2026-85655
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
CVE-2026-15261
TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key
CVE-2026-104751
Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion
CVE-2026-86827
BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php
CVE-2026-16612
FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure
CVE-2026-14224
Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR
CVE-2026-15231
TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR
CVE-2026-11571
Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts
CVE-2026-11855
Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version