← All credits
Pedro Pinho
71 vulnerability records and advisories credit this contributor.
CVE-2026-14289
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
CVE-2026-12493
Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order
CVE-2026-14603
WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection
CVE-2026-13142
Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force
CVE-2026-12972
PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering
CVE-2026-12270
Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints
CVE-2026-10830
AllCoach < 1.0.2 - Unauthenticated Account Takeover
CVE-2026-11880
Fluent Forms < 6.2.1 - Subscriber+ Subscription Cancellation via IDOR
CVE-2026-9702
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
CVE-2026-7862
Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation