← All credits
Pedro Pinho
71 vulnerability records and advisories credit this contributor.
CVE-2026-105970
BCK Auto-confirm Bank Transfer <= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation
CVE-2026-81648
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
CVE-2026-103382
Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation
CVE-2026-105997
Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient
CVE-2026-94295
Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature
CVE-2026-86791
iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery
CVE-2026-92427
Coinsnap Bitcoin Crowdfunding <= 1.2.0 - Unauthenticated Payment Record Forgery via Webhook Secret Disclosure
CVE-2026-110135
OTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute Force
CVE-2026-110179
affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter
CVE-2026-74920
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute