Sai Praneeth Koti

Sai Praneeth Koti is a security researcher credited with 30 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #205 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 7 of their findings (23%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization. The average CVSS score across these disclosures is 6.0, peaking at 9.8. Severity breakdown: 2 critical and 7 high.

The most affected software includes KiviCare (3), ACF Frontend Admin by DynamiApps (2), Dokan: AI Powered WooCommerce… (2), across 22 distinct plugins, themes and core versions in total.

All 30 disclosed issues have since received a vendor fix. The most severe finding, "SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery < 3.9.8 - Authentication Bypass via Account Takeover", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#205

of 3,823 researchers

Vulns

Critical2

High7

Medium21

Low0

Affected Assets

22plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

30 records


2026-09-22 00:00	wpForo Forum <= 3.1.5 - Authenticated (Subscriber+) PHP Object Injection wpForo Forum <= 3.1.5	`CVE-2026-80513`	7.5 High	Sai Praneeth Koti	Yes
2026-09-17 00:00	JetFormBuilder <= 3.6.5.2 - Authenticated (Administrator+) Arbitrary File Deletion JetFormBuilder <= 3.6.5.2	`CVE-2026-19860`	6.5 Medium	Sai Praneeth Koti	Yes
2026-09-16 00:00	King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting King Addons for Elementor <= 51.1.80	`CVE-2026-84902`	6.4 Medium	Sai Praneeth Koti	Yes
2026-09-14 00:00	LearnPress <= 4.4.6 - Unauthenticated Information Exposure LearnPress <= 4.4.6	`CVE-2026-86449`	5.3 Medium	Sai Praneeth Koti	Yes
2026-09-11 00:00	Registration Form for WooCommerce 1.1.0 - 1.1.2 - Authenticated (Contributor+) Privilege Escalation Registration Form for WooCommerce 1.1.0 – 1.1.2	`CVE-2026-81431`	6.3 Medium	Sai Praneeth Koti	Yes
2026-09-11 00:00	User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.8 - Unauthenticated Open Redirect User Registration & Membership < 5.2.8	`CVE-2026-80072`	7.2 High	Sai Praneeth Koti	Yes
2026-09-05 00:00	Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization Eventin < 4.1.22	`CVE-2026-84901`	4.3 Medium	Sai Praneeth Koti	Yes
2026-09-05 00:00	Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal Eventin < 4.1.21	`CVE-2026-84898`	6.5 Medium	Sai Praneeth Koti	Yes
2026-09-04 00:00	WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization WPFunnels < 3.13.0	`CVE-2026-79632`	5.3 Medium	Sai Praneeth Koti	Yes
2026-09-03 00:00	RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting RegistrationMagic < 6.0.9.9	`CVE-2026-77792`	7.2 High	Sai Praneeth Koti	Yes

Showing 1–10 of 30 reports