Jaskaranjeet Singh

Jaskaranjeet Singh is a security researcher credited with 2 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,758 of 3,866 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (100%). The average CVSS score across these disclosures is 5.4, peaking at 6.5.

The most affected software includes PDF Builder for WooCommerce. Create… (2), across 1 distinct plugins, themes and core versions in total.

All 2 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1758

of 3,866 researchers

Vulns

Critical0

High0

Medium2

Low0

Affected Assets

1plugin

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

2 records


2026-09-18 19:30	PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler PDF Builder for WooCommerce. Create… <= 2.0.11	`CVE-2026-11899`	4.3 Medium	Jaskaranjeet Singh	Yes
2026-09-10 14:38	Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure PDF Builder for WooCommerce. Create… <= 2.0.8	`CVE-2026-11496`	6.5 Medium	Jaskaranjeet Singh	Yes

Showing 1–2 of 2 reports