Syed Balkhi
Vulnerability activity for Syed Balkhi: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.3MediumOct 9, 2026Syed Balkhi Envira Gallery Auth bypass / access controlCVE-2026-104079Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on the source post and uses a hard-coded publish status. Attackers can also supply arbitrary caller-controlled image IDs without ownership verification to publish unauthorized content using attachments they
- 7.1HighOct 6, 2026Syed Balkhi Charitable XSSCVE-2026-104394Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.
- 7.5HighSep 30, 2026Syed Balkhi NextGEN Gallery Path traversal / file handlingCVE-2026-94123Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.
- 7.6HighSep 23, 2026Syed Balkhi Easy Digital Downloads SQL injectionCVE-2026-95522Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.
- 7.5HighJun 26, 2026Syed Balkhi Intranet & Private Site – All-In-One Intranet Auth bypass / access controlCVE-2026-54837Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions.
Top products
- NextGEN Gallery1 CVE in the last year
- Intranet & Private Site – All-In-One Intranet1 CVE in the last year
- Envira Gallery1 CVE in the last year
- Easy Digital Downloads1 CVE in the last year
- Charitable1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.