← All credits
Nabil Irawan
123 vulnerability records and advisories credit this contributor.
CVE-2025-9898
cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery
CVE-2026-1786
Twitter posts to Blog <= 1.11.25 - Missing Authorization to Unauthenticated Plugin Settings Update
CVE-2025-9899
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
CVE-2026-4281
FormLift for Infusionsoft Web Forms <= 7.5.21 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow
CVE-2025-12370
Takeads <= 1.0.13 - Missing Authorization to Plugin Settings Deletion
CVE-2025-12173
WP Admin Microblog <= 3.1.1 - Cross-Site Request Forgery to Message Creation
CVE-2025-11824
Cinza Grid <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field
CVE-2025-5924
WP Firebase Push Notification <= 1.2.0 - Cross-Site Request Forgery to Broadcast Notification
CVE-2026-3056
Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing
CVE-2025-7843
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery