← All credits
Afan
4 vulnerability records and advisories credit this contributor.
CVE-2026-14873
Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset
CVE-2026-15303
6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter
CVE-2026-15341
User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters
CVE-2026-16635
Pronamic Pay <= 10.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms 'Update user role' Field