← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2026-3354
Wikilookup <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Popup Width' Setting
CVE-2026-4161
Review Map by RevuKangaroo <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
CVE-2026-3353
Comment SPAM Wiper <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting
CVE-2025-14168
WP DB Booster <= 1.0.1 - Cross-Site Request Forgery to Database Cleanup
CVE-2025-14167
Remove Post Type Slug <= 1.0.2 - Cross-Site Request Forgery to Settings Update
CVE-2025-13194
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming
CVE-2026-1075
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Settings Update
CVE-2026-1081
Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update
CVE-2026-2499
Custom Logo <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Logo Path Setting
CVE-2026-1503
login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting