← All credits
Nabil Irawan
121 vulnerability records and advisories credit this contributor.
CVE-2025-9897
AP Background <= 3.8.2 - Cross-Site Request Forgery
CVE-2025-9894
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
CVE-2025-9892
Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update
CVE-2025-9633
LH Signing <= 2.83 - Cross-Site Request Forgery
CVE-2025-10309
PayPal Forms <= 1.0.3 - Cross-Site Request Forgery
CVE-2026-92712
ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter
CVE-2025-14469
Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification
CVE-2025-10308
Astro Booking Engine <= 1.4.0 - Cross-Site Request Forgery to Settings Reset
CVE-2026-76562
Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter
CVE-2026-4123
RW Elephant Rental Inventory <= 2.3.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'toggle_cache' AJAX Action