← All credits
Muhammad Daffa (Patchstack Alliance)
95 vulnerability records and advisories credit this contributor.
CVE-2023-47852
WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection
CVE-2023-47829
WordPress Quick Call Button Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47236
WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection
CVE-2023-46784
WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability
CVE-2023-46822
WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46821
WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection
CVE-2023-46823
WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection
CVE-2023-44473
WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-28989
WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-27461
WordPress When Last Login Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)