← All credits
Md. Moniruzzaman Prodhan
53 vulnerability records and advisories credit this contributor.
CVE-2025-14886
Japanized for WooCommerce <= 2.7.17 - Missing Authorization to Unauthenticated Order Status Modification
CVE-2025-13666
Helloprint <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification
CVE-2025-13696
Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint
CVE-2025-14450
Wallet System for WooCommerce <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation
CVE-2025-12505
weDocs <= 2.1.14 - Missing Authorization to Settings Update
CVE-2025-14080
Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification
CVE-2025-13452
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
CVE-2025-14461
Xendit Payment <= 6.0.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid
CVE-2025-12633
Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
CVE-2025-15511
Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification