Sajjad Haqi

Sajjad Haqi is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #751 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 5.6, peaking at 6.5.

The most affected software includes Media Library Assistant (2), Paymob for WooCommerce (1), User Frontend (1), across 4 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#751

of 3,333 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

4plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

5 records


2026-06-19 00:00	Paymob for WooCommerce <= 4.1.2 - Missing Authorization Paymob for WooCommerce <= 4.1.2	`CVE-2026-56025`	5.3 Medium	Sajjad Haqi	No
2026-06-18 00:00	WP Easy Pay – Payment and Donation form Builder for Square <= 4.5.0 - Cross-Site Request Forgery WP Easy Pay <= 4.5.0	`CVE-2026-56024`	4.3 Medium	Sajjad Haqi	Yes
2026-04-27 00:00	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Missing Authorization User Frontend <= 4.3.1	`CVE-2026-42412`	5.3 Medium	Sajjad Haqi	Yes
2026-04-06 00:00	Media Library Assistant <= 3.34 - Authenticated (Contributor+) SQL Injection Media Library Assistant <= 3.34	`CVE-2026-34885`	6.5 Medium	Sajjad Haqi	Yes
2026-04-06 00:00	Media Library Assistant <= 3.34 - Authenticated (Contributor+) Stored Cross-Site Scripting Media Library Assistant <= 3.34	`CVE-2026-34897`	6.4 Medium	Sajjad Haqi	Yes

Showing 1–5 of 5 reports