← All credits
Muhammad Yudha - DJ
351 vulnerability records and advisories credit this contributor.
CVE-2025-8685
Wp chart generator <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode
CVE-2025-10138
This-or-That by André Boekhorst <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-1557
WP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via src
CVE-2025-7655
Live Stream Badger <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11767
NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-8315
WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
CVE-2025-13367
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2025-10660
WP Dashboard Chat <= 1.0.3 - Authenticated (Contributor+) SQL Injection via id
CVE-2024-13401
Payment Button for PayPal <= 1.2.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-13898
Ultra Skype Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_id' Shortcode Attribute