Wordfence Intelligence   >   Vulnerability Researchers   >   Ryan Fabella

Ryan Fabella

Organization: Natrya Kreasi Mandiri

434
All Time Ranking
11
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

About

IT professional with 10+ years of experience in cloud infrastructure, enterprise architecture, and observability technologies (Grafana, Prometheus, ELK, Splunk). Consultant at MCG A/S, Lead Mentor at AWS Social Economic Accelerator LAB, and former CEO of Natrya Solutions. Previously held architect roles at IBM Indonesia and Sun Microsystems Indonesia. Passionate about digital transformation, agile methodologies, and fostering innovation.

11 Vulnerabilities

Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation
7.3
CVE-2026-103692
Oct 8, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Yaad Sarig Payment Gateway For WC <= 2.2.12 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2026-104651
Oct 5, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CP Media Player <= 1.3.3 - Missing Authorization
4.3
CVE-2026-104678
Oct 5, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Koinonia Link 1.1.2 - 1.1.4 - Authenticated (Subscriber+) Privilege Escalation
6.3
CVE-2026-87782
Oct 5, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
InPost for WooCommerce 1.7.5 - 1.9.7 - Missing Authorization
5.3
CVE-2026-93580
Sep 28, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Paymob for WooCommerce <= 4.1.13 - Missing Authorization
4.3
CVE-2026-87981
Sep 21, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated Information Exposure
5.3
CVE-2026-78474
Sep 14, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Nexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2026-82213
Sep 11, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Login & Register Forms <= 4.0.1 - Unauthenticated Account Takeover via Brute Force Password Reset Code
8.1
CVE-2026-18469
Aug 5, 2026
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery
4.3
CVE-2026-13729
Aug 1, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure
4.3
CVE-2026-16746
Jul 27, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation CVE-2026-103692 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L October 8, 2026
Yaad Sarig Payment Gateway For WC <= 2.2.12 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2026-104651 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N October 5, 2026
CP Media Player <= 1.3.3 - Missing Authorization CVE-2026-104678 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N October 5, 2026
Koinonia Link 1.1.2 - 1.1.4 - Authenticated (Subscriber+) Privilege Escalation CVE-2026-87782 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L October 5, 2026
InPost for WooCommerce 1.7.5 - 1.9.7 - Missing Authorization CVE-2026-93580 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 28, 2026
Paymob for WooCommerce <= 4.1.13 - Missing Authorization CVE-2026-87981 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N September 21, 2026
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated Information Exposure CVE-2026-78474 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N September 14, 2026
Nexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Insecure Direct Object Reference CVE-2026-82213 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 11, 2026
Login & Register Forms <= 4.0.1 - Unauthenticated Account Takeover via Brute Force Password Reset Code CVE-2026-18469 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H August 5, 2026
Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery CVE-2026-13729 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N August 1, 2026
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure CVE-2026-16746 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 27, 2026

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation