← All credits
ryan fabella
32 vulnerability records and advisories credit this contributor.
CVE-2026-107127
Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF
CVE-2026-107789
SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR
CVE-2026-92997
Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter
CVE-2026-106028
ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation
CVE-2026-91047
ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
CVE-2026-94273
Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment
CVE-2026-109930
MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key
CVE-2026-107160
LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message
CVE-2026-87843
Trust Payments Gateway for WooCommerce < 3.1.0 - Unauthenticated Order Payment Completion via Payment Return Page
CVE-2026-94261
Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Payment Confirmation Forgery via an Unbound Transaction Id