← All credits
Muhammad Nur Ibnu Hubab
95 vulnerability records and advisories credit this contributor.
CVE-2026-2489
TP2WP Importer <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Watched domains' Textarea
CVE-2025-14462
Lucky Draw Contests <= 4.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-13142
Custom Post Type <= 1.0 - Cross-Site Request Forgery to Custom Post Type Deletion
CVE-2026-4069
Alfie – Feed Plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'naam' Parameter
CVE-2026-2424
Reward Video Ad for WordPress <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings
CVE-2025-14164
Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update
CVE-2026-1380
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-2498
WP Social Meta <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
CVE-2026-1390
Redirect countdown <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2026-1378
WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update