← All credits
dayea song
35 vulnerability records and advisories credit this contributor.
CVE-2025-12587
Peer Publish <= 1.0 - Cross-Site Request Forgery
CVE-2025-14391
Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update
CVE-2025-13366
Rabbit Hole <= 1.1 - Cross-Site Request Forgery to Settings Reset
CVE-2025-15376
Stopwords for comments <= 1.1 - Missing Authorization to Cross-Site Request Forgery
CVE-2025-13527
xShare <= 1.0.1 - Cross-Site Request Forgery to 'rs_plugin_reset' Parameter
CVE-2025-7439
Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link
CVE-2025-13987
Purchase and Expense Manager <= 1.1.2 - Cross-Site Request Forgery to Arbitrary Purchase Record Deletion
CVE-2025-12065
WP Carticon <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2025-14394
Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update
CVE-2025-13361
Web to SugarCRM Lead <= 1.0.0 - Cross-Site Request Forgery to Custom Field Deletion