← All credits
Karthik Ramakrishnan
106 vulnerability records and advisories credit this contributor.
CVE-2026-107694
Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint
CVE-2026-104752
Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import
CVE-2026-104753
Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter
CVE-2026-104754
Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL
CVE-2026-107321
W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import
CVE-2026-84220
Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection
CVE-2026-104646
Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes
CVE-2026-104653
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions
CVE-2026-96530
Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
CVE-2026-91072
EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler