Het Kalariya

Het Kalariya is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,241 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (100%). The average CVSS score across these disclosures is 6.2, peaking at 6.4.

The most affected software includes Loco Translate (1), Subscribe to Comments (1), WP Mobile Menu (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1241

of 3,823 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

3 records


2026-10-09 00:00	Subscribe to Comments <= 2.3.2 - Reflected Cross-Site Scripting Subscribe to Comments <= 2.3.2	`CVE-2026-91829`	6.1 Medium	Het Kalariya	Yes
2026-10-01 00:00	Loco Translate <= 2.8.8 - Authenticated (Translator+) Stored Cross-Site Scripting Loco Translate <= 2.8.8	`CVE-2026-94239`	6.4 Medium	Het Kalariya	Yes
2026-09-28 00:00	Mobile Menu 2.7.4 - 2.8.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting WP Mobile Menu 2.7.4 – 2.8.8	`CVE-2026-91832`	6.1 Medium	Het Kalariya	Yes

Showing 1–3 of 3 reports