← All credits
Usama Arshad
30 vulnerability records and advisories credit this contributor.
CVE-2026-96962
Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code
CVE-2026-86789
Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes
CVE-2026-96899
Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script
CVE-2026-80514
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
CVE-2026-82850
Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure
CVE-2026-83555
Email Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token Verification
CVE-2026-84026
Directorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users Endpoint
CVE-2026-85010
RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
CVE-2026-85009
RestroPress <= 3.4.6 - Unauthenticated Order Enumeration and Order Note Modification via Payment Recovery
CVE-2026-85349
FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR