← All credits
Osman Hussein
15 vulnerability records and advisories credit this contributor.
CVE-2026-92895
Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameter
CVE-2026-109220
PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field
CVE-2026-116512
Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
CVE-2026-78396
Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure
CVE-2026-111031
Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter
CVE-2026-109219
Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
CVE-2026-103768
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment
CVE-2026-108587
10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
CVE-2026-93388
Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url
CVE-2026-86461
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter