← All credits
Vaibhav Narkhede
19 vulnerability records and advisories credit this contributor.
CVE-2026-11871
Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details
CVE-2026-77773
Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry
CVE-2026-78152
SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema
CVE-2026-78151
FormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission Response
CVE-2026-16567
Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle
CVE-2026-16984
WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure
CVE-2026-77754
Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
CVE-2026-77758
Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
CVE-2026-13328
TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification
CVE-2026-17014
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips