← All credits
dayea song
35 vulnerability records and advisories credit this contributor.
CVE-2025-13361
Web to SugarCRM Lead <= 1.0.0 - Cross-Site Request Forgery to Custom Field Deletion
CVE-2025-12065
WP Carticon <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2025-12456
Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting
CVE-2025-12415
MapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
CVE-2025-12413
Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Update
CVE-2025-12412
Top Bar Notification <= 1.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2025-12188
Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update
CVE-2025-12587
Peer Publish <= 1.0 - Cross-Site Request Forgery
CVE-2025-12586
Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery
CVE-2025-12032
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting