← All credits
Nabil Irawan
122 vulnerability records and advisories credit this contributor.
CVE-2026-5425
Widgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_data
CVE-2025-12072
Disable Content Editor For Specific Template <= 2.0 - Cross-Site Request Forgery to Template Configuration Update
CVE-2025-9374
Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery
CVE-2026-2506
EM Cost Calculator <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting via 'customer_name'
CVE-2025-12373
Torod – The smart shipping and delivery portal for e-shops and retailers <= 1.9 - Cross-Site Request Forgery To Plugin's Settings Modification
CVE-2025-9631
AutoCatSet <= 2.1.4 - Cross-Site Request Forgery
CVE-2025-10311
Comment Info Detector <= 1.0.5 - Cross-Site Request Forgery to Settings Update
CVE-2025-5933
RD Contacto <= 1.4 - Cross-Site Request Forgery to Settings Update
CVE-2025-12578
Reuters Direct <= 3.0.0 - Cross-Site Request Forgery to Settings Reset
CVE-2026-2941
Linksy Search and Replace <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Update via linksy_search_and_replace_item_details