← All credits
dayea song
35 vulnerability records and advisories credit this contributor.
CVE-2025-7440
Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Carousel button link
CVE-2025-13519
SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
CVE-2025-12586
Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery
CVE-2025-13360
Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update
CVE-2025-13621
dream gallery <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'dreampluginsmain' AJAX Action
CVE-2025-15377
Sosh Share Buttons <= 1.1.0 - Cross-Site Request Forgery
CVE-2025-12413
Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Update
CVE-2025-12032
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2025-14393
Wpik WordPress Basic Ajax Form <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-14389
WPBlogSyn <= 1.0 - Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update