← All credits
Khaled Alenazi (Nxploited)
60 vulnerability records and advisories credit this contributor.
CVE-2026-9810
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth
CVE-2026-12281
Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing
CVE-2026-14245
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
CVE-2026-11794
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
CVE-2026-2418
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
CVE-2025-9544
Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation
CVE-2025-15491
Post Slides <= 1.0.1 - Contributor+ Local File Inclusion
CVE-2025-15445
Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation
CVE-2025-14892
Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation
CVE-2025-14829
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion