← All credits
Muhammad Afnaan
45 vulnerability records and advisories credit this contributor.
CVE-2025-14904
Newsletter Email Subscribe <= 2.4 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-14845
NS IE Compatibility Fixer <= 2.1.5 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-14792
Key Figures <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting via kf_field_figure_default_color_render
CVE-2026-8904
FastPicker, an order picker and order management system (oms) for WooCommerce on steroids <= 1.0.2 - Cross-Site Request Forgery via Settings Save
CVE-2026-8940
WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2026-8902
AJAX Report Comments <= 2.0.4 - Cross-Site Request Forgery to Settings Update
CVE-2026-9599
Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update
CVE-2026-8939
Search Simple Fields <= 0.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2026-8938
auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass
CVE-2026-8941
CDN Linker lite <= 1.3.1 - Cross-Site Request Forgery to Plugin Settings Update