← All credits
Pablo González Pérez
46 vulnerability records and advisories credit this contributor.
CVE-2026-87761
Adwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up Settings
CVE-2026-87762
Adwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type Juggling
CVE-2026-87764
BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message
CVE-2026-82212
Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler
CVE-2026-94270
Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
CVE-2026-96886
Course Booking System < 7.0.9 - Unauthenticated Attendee PII Disclosure via CSV Export
CVE-2026-93000
SPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search
CVE-2026-92996
Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
CVE-2026-88788
Text Styler <= 1.1.1 - Contributor+ Stored XSS