Arif Shaikh

Arif Shaikh is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #417 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 9 findings.

Their research concentrates on Missing Authorization, which accounts for 5 of their findings (45%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 5.1, peaking at 6.4.

The most affected software includes CM Business Directory (1), E-cab Taxi Booking Manager… (1), Element Pack Addons for Elementor (1), across 11 distinct plugins, themes and core versions in total.

10 of the 11 disclosed issues have a vendor fix, while 1 remain unpatched.

20252026

Critical

High

Medium

Low

Global Rank

#417

of 3,515 researchers

Vulns

Critical0

High0

Medium10

Low1

Affected Assets

11plugins

Avg CVSS

5.1

Average score of vulnerabilities

Researcher Submissions

11 records


2026-08-10 00:00	E-cab Taxi Booking Manager for Woocommerce <= 2.0.3 - Missing Authorization E-cab Taxi Booking Manager… <= 2.0.3	`CVE-2026-27345`	5.3 Medium	Arif Shaikh	Yes
2026-07-22 00:00	Photo Block – A Modern Image Block With Lightbox and Caption Support <= 1.7.1 - Authenticated (Author+) Sever-Side Request Forgery Photo Block <= 1.7.1	`CVE-2026-24639`	6.4 Medium	Arif Shaikh	No
2026-03-16 00:00	LearnPress – Sepay Payment <= 4.0.0 - Missing Authorization LearnPress <= 4.0.0	`CVE-2026-25002`	3.7 Low	Arif Shaikh	Yes
2026-01-16 00:00	Element Pack Elementor Addons <= 8.3.13 - Cross-Site Request Forgery Element Pack Addons for Elementor <= 8.3.13	`CVE-2025-31413`	4.3 Medium	Arif Shaikh	Yes
2026-01-16 00:00	CM Business Directory – Optimise and showcase local business <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting CM Business Directory <= 1.5.3	`CVE-2026-25004`	6.4 Medium	Arif Shaikh	Yes
2026-01-15 00:00	LearnPress – Course Review <= 4.1.9 - Authenticated (Learnpress student+) Stored Cross-Site Scripting LearnPress <= 4.1.9	`CVE-2026-24361`	6.4 Medium	Arif Shaikh	Yes
2026-01-10 07:10	File Uploads Addon for WooCommerce <= 1.7.3 - Missing Authorization File Uploads Addon for WooCommerce <= 1.7.3	`CVE-2026-24625`	5.3 Medium	Arif Shaikh	Yes
2026-01-09 00:00	Stock Manager for WooCommerce < 3.6.0 - Cross-Site Request Forgery Stock Manager for WooCommerce < 3.6.0	`CVE-2026-24365`	4.3 Medium	Arif Shaikh	Yes
2026-01-07 00:00	ShopMagic <= 4.7.2 - Missing Authorization ShopMagic <= 4.7.2	`CVE-2025-69093`	5.3 Medium	Arif Shaikh	Yes
2025-12-31 00:00	Email Capture <= 3.12.5 - Cross-Site Request Forgery Email Marketing Plugin <= 3.12.5	`CVE-2025-68529`	4.3 Medium	Arif Shaikh	Yes

Showing 1–10 of 11 reports