CVEs we hold for Syed

Records whose assigning authority named Syed as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-81287WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerabilitySyed Balkhi Charitable

CVE-2026-73994WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerabilitySyed Balkhi Charitable

CVE-2026-66476WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerabilitySyed Balkhi Easy Digital Downloads

CVE-2026-54837WordPress Intranet & Private Site – All-In-One Intranet plugin <= 1.8.1 - Broken Access Control vulnerabilitySyed Balkhi Intranet & Private Site &#8211…

CVE-2026-52698WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data…Syed Balkhi PushEngage – Web Push Notifications, eCommerce…

CVE-2026-40764WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Contact Form by WPForms

CVE-2026-39476WordPress User Feedback plugin <= 1.10.1 - Broken Access Control vulnerabilitySyed Balkhi User Feedback

CVE-2026-39475WordPress User Feedback plugin <= 1.10.1 - SQL Injection vulnerabilitySyed Balkhi User Feedback

CVE-2026-32446WordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerabilitySyed Balkhi Contact Form by WPForms

CVE-2026-28141WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi NextGEN Gallery

CVE-2026-25339WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerabilitySyed Balkhi Contact Form by WPForms

CVE-2026-24636WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerabilitySyed Balkhi Sugar Calendar (Lite)

CVE-2025-68496WordPress User Feedback plugin <= 1.10.0 - SQL Injection vulnerabilitySyed Balkhi User Feedback

CVE-2025-67950WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerabilitySyed Balkhi All In One SEO Pack

CVE-2025-66064WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Giveaways and Contests by RafflePress

CVE-2025-64635WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerabilitySyed Balkhi Feeds for YouTube

CVE-2025-64295WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerabilitySyed Balkhi All In One SEO Pack

CVE-2025-60112WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) VulnerabilitySyed Balkhi aThemes Addons for Elementor

CVE-2025-58650WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control VulnerabilitySyed Balkhi All In One SEO Pack

CVE-2025-58649WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure VulnerabilitySyed Balkhi All In One SEO Pack

CVE-2025-58001WordPress Compact Archives plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi Compact Archives

CVE-2025-53460WordPress AffiliateWP – External Referral Links Plugin <= 1.2.0 - Cross Site Scripting (XSS) VulnerabilitySyed Balkhi AffiliateWP – External Referral Links

CVE-2025-50031WordPress DB Backup <= 6.0 - Broken Access Control Vulnerabilitysyedamirhussain91 DB Backup

CVE-2025-49997WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF VulnerabilitySyed Balkhi Giveaways and Contests by RafflePress

CVE-2025-49937WordPress Smash Balloon Social Post Feed plugin <= 4.3.2 - Broken Access Control vulnerabilitySyed Balkhi Smash Balloon Social Post Feed

CVE-2025-49423WordPress Bulk YouTube Post Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilitySyed Tahir Ali Jan Bulk YouTube Post Creator

CVE-2025-47596WordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Beacon Lead Magnets and Lead Capture

CVE-2025-47520WordPress Charitable plugin <= 1.8.5.1 - Cross Site Scripting (XSS) VulnerabilitySyed Balkhi Charitable

CVE-2025-46451WordPress Floating Social Bar plugin <= 1.1.7 - Cross Site Scripting (XSS) VulnerabilitySyed Balkhi Floating Social Bar

CVE-2025-32158WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerabilitySyed Balkhi aThemes Addons for Elementor

CVE-2025-31734WordPress Simple Post Expiration plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi Simple Post Expiration

CVE-2025-30770WordPress Charitable plugin <= 1.8.4.7 - Cross Site Scripting (XSS) VulnerabilitySyed Balkhi Charitable

CVE-2025-24750WordPress ExactMetrics plugin <= 8.1.0 - Broken Access Control vulnerabilitySyed Balkhi ExactMetrics

CVE-2025-24637WordPress Beacon Lead Magnets and Lead Capture Plugin <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerabilitySyed Balkhi Beacon Lead Magnets and Lead Capture

CVE-2025-23566WordPress Custom Post plugin <= 1.0 - CSRF to Stored XSS vulnerabilitysyedamirhussain91 Custom Post

CVE-2025-22646WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerabilitySyed Balkhi aThemes Addons for Elementor

CVE-2024-56276WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerabilitySyed Balkhi Contact Form by WPForms

CVE-2024-51675WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi aThemes Addons for Elementor

CVE-2024-49685WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Custom Twitter Feeds (Tweets Widget)

CVE-2024-49250WordPress Table of Contents Plus plugin <= 2408 - Cross Site Request Forgery (CSRF) vulnerabilitySyed Balkhi Table of Contents Plus

CVE-2023-50887WordPress User Feedback plugin <= 1.0.10 - Broken Access Control vulnerabilitySyed Balkhi User Feedback

CVE-2023-45747WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)Syed Balkhi WP Lightbox 2

CVE-2023-40005WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access ControlSyed Balkhi Easy Digital Downloads

CVE-2020-36919WPForms 1.7.8 - Cross-Site Scripting (XSS)Syed Balkhi WPForms

44 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.