← All credits
Pedro Pinho
57 vulnerability records and advisories credit this contributor.
CVE-2026-14834
Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX
CVE-2026-14919
ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute
CVE-2026-14830
FlxWoo < 3.1.1 - Unauthenticated Payment Bypass
CVE-2026-14602
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
CVE-2026-14305
WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes
CVE-2026-14545
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset
CVE-2026-14289
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
CVE-2026-12493
Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order
CVE-2026-14603
WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection
CVE-2026-13142
Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force