← All credits
Pedro Pinho
71 vulnerability records and advisories credit this contributor.
CVE-2026-105969
CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure
CVE-2026-94275
Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter
CVE-2026-103517
Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook
CVE-2026-84169
UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery
CVE-2026-91078
TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN
CVE-2026-84091
SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN
CVE-2026-86783
PostX < 5.0.41 - Unauthenticated Custom Field Key Disclosure via REST API
CVE-2026-86814
UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email
CVE-2026-85350
UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together
CVE-2026-87896
Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route