Muni Nitish Kumar Yaddala

Muni Nitish Kumar Yaddala is a security researcher credited with 64 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #105 of 3,899 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 17 of their findings (27%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.2, peaking at 9.8. Severity breakdown: 1 critical and 4 high.

The most affected software includes Brizy (3), Eventin (3), Accept PayPal & Stripe… (2), across 55 distinct plugins, themes and core versions in total.

61 of the 64 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "ProfilePress <= 4.16.17 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#105

of 3,899 researchers

Vulns

66

Critical1
High4
Medium57
Low4
Affected Assets

57

57plugins
Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

64 records
2026-10-20 15:13CVE-2026-112824
5.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-19 12:13CVE-2026-111839
5.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-19 00:00CVE-2026-107128
2.7
Low
Muni Nitish Kumar YaddalaYes
2026-10-19 00:00CVE-2026-111956
5.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-14 00:00CVE-2026-106098
5.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-14 00:00CVE-2026-108066
2.7
Low
Muni Nitish Kumar YaddalaYes
2026-10-09 00:00CVE-2026-104684
4.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-08 00:00CVE-2026-94258
2.7
Low
Muni Nitish Kumar YaddalaYes
2026-10-08 00:00CVE-2026-105197
4.3
Medium
Muni Nitish Kumar YaddalaYes
2026-10-08 00:00CVE-2026-105194
4.3
Medium
Muni Nitish Kumar YaddalaYes
Showing 1–10 of 64 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C