← All credits
Muhammad Afnaan
45 vulnerability records and advisories credit this contributor.
CVE-2026-8943
GoStats for WordPress <= 1.4 - Cross-Site Request Forgery via gostats_manage() Function
CVE-2026-8903
Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update
CVE-2026-7614
Old Posts Highlighter <= 1.0.3 - Cross-Site Request Forgery to Settings Update
CVE-2026-8942
MetaMagic SEO Plugin <= 1.6 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page
CVE-2026-7616
Zawgyi Embed <= 2.1.1 - Cross-Site Request Forgery via 'zawgyi_forceCSS' Parameter
CVE-2026-6932
Woo Commerce Minimum Weight <= 3.0.1 - Cross-Site Request Forgery via Settings Update Form
CVE-2026-6700
DX Sources <= 2.0.1 - Cross-Site Request Forgery to Settings Update
CVE-2026-4121
Kcaptcha <= 1.0.1 - Cross-Site Request Forgery to Settings Update
CVE-2026-4133
TextP2P Texting Widget <= 1.7 - Cross-Site Request Forgery to Settings Update
CVE-2026-4139
mCatFilter <= 0.5.2 - Cross-Site Request Forgery via compute_post() Function