← All credits
Muni Nitish Kumar Yaddala
74 vulnerability records and advisories credit this contributor.
CVE-2026-110537
Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action
CVE-2026-107128
Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization
CVE-2026-111956
WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure
CVE-2026-108066
WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR
CVE-2026-106098
WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update
CVE-2026-104684
Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
CVE-2026-105194
Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block
CVE-2026-105197
LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR
CVE-2026-94258
SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions
CVE-2026-86841
Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options