← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2026-2838
Whole Enquiry Cart for WooCommerce <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'woowhole_success_msg' Parameter
CVE-2026-3574
Experto Dashboard for WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Navigation Font Size' Setting
CVE-2025-13521
WP Status Notifier <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-1398
Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-1087
The Guardian News Feed <= 1.2 - Cross-Site Request Forgery to Settings Update
CVE-2025-13520
MTCaptcha WordPress Plugin <= 2.7.2 - Cross-Site Request Forgery to Settings Update
CVE-2025-14077
Simcast <= 1.0.0 - Cross-Site Request Forgery to Settings Update
CVE-2025-13205
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning
CVE-2026-2837
Ricerca – advanced search <= 1.1.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings
CVE-2026-2723
Post Snippits <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update