← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2025-14162
BMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion
CVE-2025-14160
Upcoming for Calendly <= 1.2.4 - Cross-Site Request Forgery to Settings Update
CVE-2025-14158
Coding Blocks <= 1.1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-3367
Lockme OAuth2 calendars integration <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'App ID' Setting
CVE-2026-8905
Osiris Signature Banner <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'prepend_text' Parameter
CVE-2026-6292
MP Customize Login Page <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-8907
WP-Ultimate-Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter
CVE-2026-8909
WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action
CVE-2026-8910
WP Emoticon Rating <= 1.0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting via 'emo_settings' Parameter
CVE-2026-8422
Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Update