← All credits
Xanlar Agamalizade
7 vulnerability records and advisories credit this contributor.
CVE-2026-104337
Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply
CVE-2026-112237
Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)
CVE-2026-88797
Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation
CVE-2026-89089
OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)
CVE-2026-89054
OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes
CVE-2026-18466
WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
CVE-2026-19135
OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes