← All credits
Karthik Ramakrishnan
106 vulnerability records and advisories credit this contributor.
CVE-2026-79627
Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass
CVE-2026-81343
Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
CVE-2026-81344
Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection
CVE-2026-110976
AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media
CVE-2026-110981
WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter
CVE-2026-111041
AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media
CVE-2026-85345
FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
CVE-2026-104680
Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard
CVE-2026-104681
Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field
CVE-2026-104682
Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route