← All credits
Khaled Alenazi (Nxploited)
60 vulnerability records and advisories credit this contributor.
CVE-2025-12820
Pure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings Update
CVE-2025-12696
HelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings Reset
CVE-2025-12573
Bookingor <= 1.0.12 - Subscriber+ Category Deletion
CVE-2025-11855
Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation
CVE-2025-11237
Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update
CVE-2025-11072
Download Counter Button <= 1.8.6.7 - Unauthenticated Arbitrary File Download
CVE-2025-10915
Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation
CVE-2025-10638
NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Subscribers Export
CVE-2025-10635
Find Me On <= 2.0.9.1 - Subscriber+ SQL Injection
CVE-2025-15484
Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass