← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2025-13142
Custom Post Type <= 1.0 - Cross-Site Request Forgery to Custom Post Type Deletion
CVE-2025-13134
AuthorSure <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2025-12125
HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2025-14462
Lucky Draw Contests <= 4.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-14354
Resource Library for Logged In Users <= 1.5 - Cross-Site Request Forgery to Multiple Administrative Actions
CVE-2025-14165
Kirim.Email WooCommerce Integration <= 1.2.9 - Cross-Site Request Forgery to Settings Update
CVE-2025-14162
BMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion
CVE-2025-14160
Upcoming for Calendly <= 1.2.4 - Cross-Site Request Forgery to Settings Update
CVE-2025-14158
Coding Blocks <= 1.1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-2838
Whole Enquiry Cart for WooCommerce <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'woowhole_success_msg' Parameter