← All credits
Farid Narimanov
20 vulnerability records and advisories credit this contributor.
CVE-2026-18357
WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure
CVE-2026-18032
WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass
CVE-2026-17541
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
CVE-2026-16734
Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount Manipulation
CVE-2026-16619
miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
CVE-2026-16561
Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure
CVE-2026-19728
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
CVE-2026-19726
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
CVE-2026-19714
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
CVE-2026-19712
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description