Syed Balkhi vulnerabilities
45 CVEs and advisories name Syed Balkhi as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-104079Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint
- CVE-2026-104394WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-94123WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability
- CVE-2026-95522WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
- CVE-2026-81287WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerability
- CVE-2026-73994WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
- CVE-2026-28141WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66476WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability
- CVE-2026-54837WordPress Intranet & Private Site – All-In-One Intranet plugin <= 1.8.1 - Broken Access Control vulnerability
- CVE-2026-52698WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
- CVE-2026-40764WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-39476WordPress User Feedback plugin <= 1.10.1 - Broken Access Control vulnerability
- CVE-2026-39475WordPress User Feedback plugin <= 1.10.1 - SQL Injection vulnerability
- CVE-2026-25339WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability
- CVE-2026-32446WordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerability
- CVE-2026-24636WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerability
- CVE-2020-36919WPForms 1.7.8 - Cross-Site Scripting (XSS)
- CVE-2025-68496WordPress User Feedback plugin <= 1.10.0 - SQL Injection vulnerability
- CVE-2025-64295WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability
- CVE-2025-67950WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability
- CVE-2025-64635WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerability
- CVE-2025-66064WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-49937WordPress Smash Balloon Social Post Feed plugin <= 4.3.2 - Broken Access Control vulnerability
- CVE-2025-60112WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-53460WordPress AffiliateWP – External Referral Links Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-58001WordPress Compact Archives plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-58649WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability
- CVE-2025-58650WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability
- CVE-2025-49997WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF Vulnerability
- CVE-2025-47596WordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability