← All credits
Shivamani Vastrala
37 vulnerability records and advisories credit this contributor.
CVE-2026-94238
Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter
CVE-2026-77766
Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint
CVE-2026-81340
MasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOR
CVE-2026-15247
Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
CVE-2026-81348
My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap
CVE-2026-78153
Restrict User Access 2.6 - 2.8 - Unauthenticated Content Protection Bypass via REST API Route Normalization
CVE-2026-77764
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners
CVE-2026-13404
Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init
CVE-2026-78146
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
CVE-2026-16058
YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration