← All credits
Muhammad Yudha - DJ
351 vulnerability records and advisories credit this contributor.
CVE-2025-9499
Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode
CVE-2025-7652
Easy Plugin Stats <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11829
Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12712
Shouty <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shouty Shortcode Attributes
CVE-2025-15368
SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-11161
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
CVE-2026-1821
Microtango <= 0.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2024-13501
WP-FormAssembly <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-6687
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
CVE-2025-11801
AudioTube <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting