← All credits
Nabil Irawan
121 vulnerability records and advisories credit this contributor.
CVE-2025-9899
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
CVE-2026-4281
FormLift for Infusionsoft Web Forms <= 7.5.21 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow
CVE-2025-12370
Takeads <= 1.0.13 - Missing Authorization to Plugin Settings Deletion
CVE-2025-12173
WP Admin Microblog <= 3.1.1 - Cross-Site Request Forgery to Message Creation
CVE-2025-11824
Cinza Grid <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Skin Content Field
CVE-2025-5924
WP Firebase Push Notification <= 1.2.0 - Cross-Site Request Forgery to Broadcast Notification
CVE-2026-3056
Seraphinite Accelerator <= 2.28.14 - Missing Authorization to Authenticated (Subscriber+) Log Clearing
CVE-2025-7843
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery
CVE-2025-10312
Theme Importer <= 1.0 - Cross-Site Request Forgery
CVE-2025-9372
Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting