Yaswanth Reddy Sunkara

Yaswanth Reddy Sunkara is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #432 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (20%). Other recurring categories include Deserialization Of Untrusted Data, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.8, peaking at 8.1. Severity breakdown: 0 critical and 4 high.

The most affected software includes Event Booking Manager for WooCommerce (2), Advanced Order Export For WooCommerce (1), Download Manager (1), across 9 distinct plugins, themes and core versions in total.

9 of the 10 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "Newsletters <= 4.14 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#432

of 3,333 researchers

Vulns

Critical0

High4

Medium6

Low0

Affected Assets

9plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

10 records


2026-08-13 00:00	LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.4 - Authenticated (Subscriber+) Information Exposure LearnPress < 4.4.4	`CVE-2026-12976`	4.3 Medium	Yaswanth Reddy Sunkara	Yes
2026-08-05 00:00	Download Manager < 3.3.66 - Unauthenticated Stored Cross-Site Scripting Download Manager < 3.3.66	`CVE-2026-14292`	7.2 High	Yaswanth Reddy Sunkara	Yes
2026-08-04 00:00	WP Ghost (Hide My WP Ghost) – Security & Firewall < 7.0.05 - IP Spoofing to Protection Mechanism Bypass WP Ghost (Hide My WP Ghost) < 7.0.05	`CVE-2026-11870`	5.3 Medium	Yaswanth Reddy Sunkara	Yes
2026-08-02 00:00	Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Authenticated (Contributor+) PHP Object Injection Event Booking Manager for WooCommerce < 5.3.7	`CVE-2026-16062`	7.5 High	Yaswanth Reddy Sunkara	Yes
2026-08-02 00:00	Frontend File Manager Plugin <= 23.6 - Cross-Site Request Forgery Frontend File Manager Plugin <= 23.6	`CVE-2026-16292`	4.3 Medium	Yaswanth Reddy Sunkara	No
2026-08-02 00:00	Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Missing Authorization Event Booking Manager for WooCommerce < 5.3.7	`CVE-2026-16064`	4.3 Medium	Yaswanth Reddy Sunkara	Yes
2026-06-29 00:00	SlimStat Analytics <= 5.4.0 - Unauthenticated Stored Cross-Site Scripting SlimStat Analytics <= 5.4.0	`CVE-2026-12592`	7.2 High	Yaswanth Reddy Sunkara	Yes
2026-06-23 00:00	SureForms <= 2.11.0 - Unauthenticated Payment Amount Bypass SureForms <= 2.11.0	`CVE-2026-11567`	5.3 Medium	Yaswanth Reddy Sunkara	Yes
2026-06-23 00:00	Newsletters <= 4.14 - Unauthenticated PHP Object Injection Newsletters <= 4.14	`CVE-2026-12583`	8.1 High	Yaswanth Reddy Sunkara	Yes
2026-06-17 16:45	Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter Advanced Order Export For WooCommerce <= 4.0.10	`CVE-2026-11360`	4.9 Medium	Yaswanth Reddy Sunkara	Yes

Showing 1–10 of 10 reports