Bhaveshkumar Parmar

Bhaveshkumar Parmar is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,057 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (25%). Other recurring categories include Missing Authorization, Path Traversal. The average CVSS score across these disclosures is 5.0, peaking at 6.4.

The most affected software includes BackWPup (1), Directorist (1), Dokan: AI Powered WooCommerce… (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1057

of 3,823 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

4 records


2026-10-08 00:00	BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path Traversal BackWPup < 5.7.7	`CVE-2026-86828`	4.9 Medium	Bhaveshkumar Parmar	Yes
2026-09-21 00:00	Directorist <= 8.9.4 - Authenticated (Subscriber+) Server-Side Request Forgery Directorist <= 8.9.4	`CVE-2026-84046`	6.4 Medium	Bhaveshkumar Parmar	Yes
2026-09-02 00:00	WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors < 2.7.2.1 - Authenticated (Custom Role+) Insecure Direct Object Reference WC Vendors < 2.7.2.1	`CVE-2026-81427`	4.3 Medium	Bhaveshkumar Parmar	Yes
2026-08-24 00:00	Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Missing Authorization Dokan: AI Powered WooCommerce… < 5.0.14	`CVE-2026-16577`	4.3 Medium	Bhaveshkumar Parmar	Yes

Showing 1–4 of 4 reports