Muhammad Sharief

2026

Critical

High

Medium

Low

Global Rank

#574

of 3,238 researchers

Vulns

7

Critical0

High1

Medium5

Low1

Affected Assets

7

7plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

6 records


2026-05-05 15:16	Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure Mercado Pago payments for WooCommerce <= 8.7.11	`CVE-2026-3208`	5.3 Medium	Muhammad Sharief	Yes
2026-04-15 21:51	OneSignal – Web Push Notifications <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Post Meta Deletion via 'post_id' OneSignal <= 3.8.0	`CVE-2026-3155`	3.1 Low	Muhammad Sharief	Yes
2026-03-12 19:14	Appointment Booking Calendar <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint Simply Schedule Appointments <= 1.6.9.29	`CVE-2026-3045`	7.5 High	Muhammad Sharief	Yes
2026-03-12 00:00	W3 Total Cache <= 2.9.1 - Missing Authorization W3 Total Cache <= 2.9.1	`CVE-2026-39595`	4.3 Medium	Muhammad Sharief	Yes
2026-03-10 17:12	weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API weForms <= 1.6.27	`CVE-2026-2707`	6.4 Medium	Muhammad Sharief	Yes
2026-03-04 16:31	Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification Media Library Assistant <= 3.33	`CVE-2026-3072`	4.3 Medium	Muhammad Sharief	Yes

Showing 1–6 of 6 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C