← All credits
Nirmal
21 vulnerability records and advisories credit this contributor.
CVE-2025-0506
Rise Blocks – A Complete Gutenberg Page Builder <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter
CVE-2024-9541
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template
CVE-2024-13407
Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure
CVE-2024-13675
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13400
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13635
VK Blocks <= 1.94.2.2 - Missing Authorization to Sensitive Information Exposure
CVE-2024-12140
Elementor AI Addons – 70 Widgets, Premium Templates, Ultimate Elements <= 2.2.1 - Authenticated (Contributor+) Private Templates Content Disclosure
CVE-2024-9364
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
CVE-2024-13514
B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
CVE-2024-13465
aBlocks – WordPress Gutenberg Blocks <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting