← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2026-8906
WP Promoter <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'popup_width' Parameter
CVE-2026-4070
Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed Deletion via 'delete' Parameter
CVE-2026-8424
Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery
CVE-2026-6452
Bigfishgames Syndicate <= 1.2 - Cross-Site Request Forgery to Settings Reset and Update
CVE-2026-8423
JaviBola Custom Theme Test <= 2.0.5 - Cross-Site Request Forgery
CVE-2026-6401
Bottom Bar <= 0.1.7 - Cross-Site Request Forgery to Settings Update
CVE-2026-8419
Amazon Scraper <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update
CVE-2026-6391
Sentence To SEO (keywords, description and tags) <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page Parameters
CVE-2026-6404
Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter
CVE-2026-8420
BLOGCHAT Chat System <= 1.3.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update