GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Yuvraj Tomar

2 vulnerability records and advisories credit this contributor.

CVE-2026-12385
Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter
CVE-2026-7649
ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter