← All credits
Muni Nitish Kumar Yaddala
74 vulnerability records and advisories credit this contributor.
CVE-2026-115212
mView <= 1.0.3 - Subscriber+ Arbitrary File Upload
CVE-2026-118530
Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action
CVE-2026-121848
Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation
CVE-2026-107775
Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation
CVE-2026-110525
MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent
CVE-2026-115230
WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password Reset
CVE-2026-12967
WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass
CVE-2026-111962
WP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export File
CVE-2026-118437
BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion
CVE-2026-106003
Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion