← All credits
Muhammad Yudha - DJ
353 vulnerability records and advisories credit this contributor.
CVE-2025-6976
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
CVE-2025-6941
LatePoint <= 5.1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-6831
User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
CVE-2025-6757
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
CVE-2025-6756
Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
CVE-2025-6687
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
CVE-2025-5686
Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5565
Hide It <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5564
GC Social wall <= 1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5563
WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection