← All credits
Muhammad Yudha - DJ
353 vulnerability records and advisories credit this contributor.
CVE-2025-7652
Easy Plugin Stats <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10496
Cookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-11722
Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-11161
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
CVE-2025-11160
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
CVE-2025-10730
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
CVE-2025-10660
WP Dashboard Chat <= 1.0.3 - Authenticated (Contributor+) SQL Injection via id
CVE-2025-10133
URLYar <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12017
VNPAY for Woocommerce <= 1.0.0 - Reflected Cross-Site Scripting
CVE-2025-11992
Multi Item Responsive Slider <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting