← All credits
Charles Vosburgh
23 vulnerability records and advisories credit this contributor.
CVE-2026-104118
Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
CVE-2026-63045
Apache HTTP Server: mod_proxy_ftp PASV address handling
CVE-2026-59797
Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
CVE-2026-96896
Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request
CVE-2026-78397
Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation
CVE-2026-74991
WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent
CVE-2026-87978
Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion
CVE-2026-92403
Secure Custom Fields < 6.9.4 - Unauthenticated Post Modification via Front-End Form ID Substitution
CVE-2026-81810
All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure