← All credits
Muhammad Yudha - DJ
353 vulnerability records and advisories credit this contributor.
CVE-2025-12754
Geopost <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-12753
Chart Expert <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-12711
Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode
CVE-2025-12646
Community Events <= 1.5.4 - Unauthenticated SQL Injection
CVE-2025-12643
Saphali LiqPay for donate <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-11801
AudioTube <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11769
WordPress Content Flipper <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10691
Easy Email Subscription <= 1.3 - Cross-Site Request Forgery to Arbitrary Subscriber Deletion
CVE-2025-10683
Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid
CVE-2025-14344
Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion