← All credits
Usama Arshad
12 vulnerability records and advisories credit this contributor.
CVE-2026-18050
Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
CVE-2026-17022
Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard
CVE-2026-16988
GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint
CVE-2026-16558
YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema
CVE-2026-16041
MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-74930
WP Project Manager 2.2.0 - 4.0.6 - Subscriber+ User Activity Feed Disclosure via IDOR
CVE-2026-74928
WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes
CVE-2026-18789
Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes
CVE-2026-18786
CheckView < 2.3.2 - Administrator Account Creation via REST API Authentication Bypass
CVE-2026-16737
WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart