← All credits
Nabil Irawan
123 vulnerability records and advisories credit this contributor.
CVE-2026-3535
DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter
CVE-2025-11825
Playerzbr <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Meta Field
CVE-2025-10302
Ultimate Viral Quiz <= 1.0 - Cross-Site Request Forgery to Settings Update
CVE-2025-9633
LH Signing <= 2.83 - Cross-Site Request Forgery
CVE-2025-6059
Seraphinite Accelerator <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions
CVE-2025-9897
AP Background <= 3.8.2 - Cross-Site Request Forgery
CVE-2025-10376
Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery
CVE-2025-5928
WP Sliding Login/Dashboard Panel <= 2.1.1 - Cross-Site Request Forgery to Settings Update
CVE-2026-1373
Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL
CVE-2025-9946
LockerPress – WordPress Security Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting