← All credits
Muhammad Yudha - DJ
353 vulnerability records and advisories credit this contributor.
CVE-2026-0559
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode
CVE-2025-14851
YaMaps for WordPress <= 0.6.40 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Parameters
CVE-2025-13966
Paypal Payment Shortcode <= 1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttom_image' Shortcode Attribute
CVE-2024-10789
WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update
CVE-2025-11867
Bg Book Publisher <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12622
WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12804
Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode
CVE-2025-4168
Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-4126
EG-Series <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-8720
Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter