← All credits
Muhammad Daffa (Patchstack Alliance)
95 vulnerability records and advisories credit this contributor.
CVE-2023-50845
WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection
CVE-2023-49836
WordPress Cookie Bar Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47852
WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection
CVE-2023-47829
WordPress Quick Call Button Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47236
WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection
CVE-2023-46784
WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability
CVE-2023-46822
WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46821
WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection
CVE-2023-46823
WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection
CVE-2023-44473
WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)