← All credits
Nabil Irawan
121 vulnerability records and advisories credit this contributor.
CVE-2026-1303
MailChimp Campaigns <= 3.2.4 - Missing Authorization to Authenticated (Subscriber+) MailChimp App Disconnection
CVE-2025-12372
The Permalinks Cascade <= 2.2 - Missing Authorization To Authenticated (Subscriber+) Plugin Settings Update
CVE-2025-9948
Chat by Chatwee <= 2.1.3 - Cross-Site Request Forgery to Settings Update
CVE-2025-9944
Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending
CVE-2025-9622
WP Blast | SEO & Performance Booster <= 1.8.6 - Cross-Site Request Forgery to Cache Clearing
CVE-2025-4369
Companion Auto Update <= 3.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via update_delay_days parameter
CVE-2025-9630
WP SinoType <= 1.0 - Cross-Site Request Forgery
CVE-2025-5930
WP2HTML <= 1.0.2 - Cross-Site Request Forgery to Settings Update
CVE-2025-9898
cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery
CVE-2026-1786
Twitter posts to Blog <= 1.11.25 - Missing Authorization to Unauthenticated Plugin Settings Update