← All credits
Gilang Asra Bilhadi
128 vulnerability records and advisories credit this contributor.
CVE-2025-9860
Mixtape <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-1904
Simple Wp colorfull Accordion <= 1.0 - Authenticated (Contributor+) Cross-Site Scripting via 'title' Shortcode Attribute
CVE-2025-13839
LJUsers <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute
CVE-2026-3619
Sheets2Table <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titles' Shortcode Attribute
CVE-2025-6681
Fan Page <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
CVE-2025-9874
Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-6262
muse.ai video embedding <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via muse-ai Shortcode
CVE-2025-9854
A Simple Multilanguage Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-6385
WP Applink <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
CVE-2025-6261
Fleetwire Fleet Management Plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode