Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

fahadmahmood — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting fahadmahmood. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Fahadmahmood develops security research tools and penetration testing utilities, focusing on identifying vulnerabilities in web applications and network systems. Historically, their contributions center around remote code execution, cross-site scripting, and privilege escalation flaws, particularly in popular open-source platforms. While no major public security incidents directly linked to their work have been widely documented, their CVE history demonstrates consistent findings in authentication bypasses and input validation weaknesses across multiple frameworks. Their research often highlights critical flaws in widely used systems, contributing significantly to the security community's understanding of common attack vectors in enterprise environments.

CVE ID Title CVSS Severity Published
CVE-2026-6802 Easy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' Parameter — Easy Upload Files During Checkout CWE-639 5.3 Medium 2026-07-10
CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]' — WP Docs CWE-79 6.4 Medium 2026-04-16
CVE-2026-3368 Injection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Name — Injection Guard CWE-79 7.2 High 2026-03-20
CVE-2026-3577 Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title — Keep Backup Daily CWE-79 4.4 Medium 2026-03-20
CVE-2026-3339 Keep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter — Keep Backup Daily CWE-22 2.7 Low 2026-03-20
CVE-2025-12075 Order Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information Exposure — Order Splitter for WooCommerce CWE-862 4.3 Medium 2026-02-18
CVE-2025-12682 Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload — Easy Upload Files During Checkout CWE-434 9.8 Critical 2025-11-04
CVE-2024-13387 WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — WP Responsive Tabs CWE-79 6.4 Medium 2025-01-16
CVE-2024-12468 WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting — WP Datepicker CWE-79 6.1 Medium 2024-12-24
CVE-2024-12405 Export Customers Data <= 1.2.3 - Reflected Cross-Site Scripting — Export Customers Data CWE-79 6.1 Medium 2024-12-24
CVE-2024-12635 WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id' — WP Docs CWE-89 6.5 Medium 2024-12-21
CVE-2024-10057 RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode — RSS Feed Widget CWE-79 6.4 Medium 2024-10-18
CVE-2024-3895 WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update — WP Datepicker CWE-862 8.8 High 2024-05-02
CVE-2022-1820 Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting — Keep Backup Daily CWE-79 6.1 Medium 2022-06-13

This page lists every published CVE security advisory associated with fahadmahmood. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.