Nabil Irawan

Say thanks

1399.66

XP

485

Reports

39

Reports, last 90 days

#7

17 Dec, 2025
Lvl 4
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Accessibility by AudioEye<= 1.0.49
Broken Access Control
4.3
4.3
No date
Import external attachments<= 1.5.12
Broken Access Control
4.3
4.3
No date
Trinity Audio<= 5.23.3
Broken Access Control
4.3
4.3
No date
Fix Media Library<= 2.0
Sensitive Data Exposure
10.6
5.3
No date
WP Coupons and Deals<= 3.2.4
Broken Access Control
4.3
4.3
No date
Freshchat<= 2.3.4
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
RTL Tester<= 1.2
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
WP Flashy Marketing Automation<= 2.0.8
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
WP Email Capture<= 3.12.4
Broken Access Control
12.19
5.3
No date
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja <= 1.4.6
Broken Access Control
4.95
4.3
No date
Table Block by Tableberg<= 0.6.9
Broken Access Control
4.3
4.3
No date
Social Photo Fetcher<= 3.0.4
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Just TinyMCE Custom Styles<= 1.2.1
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
PDF Thumbnail Generator<= 1.4
Cross Site Request Forgery (CSRF)
0.62
4.3
No date
Gravitec.net &#8211; Web Push Notifications<= 2.9.17
Broken Access Control
4.3
4.3
No date
Ergonet Cache<= 1.0.11
Broken Access Control
4.3
4.3
No date
Auto Alt Text<= 2.5.2
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Advanced FAQ Manager<= 1.5.2
Cross Site Scripting (XSS)
2.95
5.9
No date
Post Cloner<= 1.0.0
Broken Access Control
10.6
5.3
No date
SendPulse Email Marketing Newsletter<= 2.2.1
Sensitive Data Exposure
4.3
4.3
No date
Portfolio and Projects<= 1.5.5
Sensitive Data Exposure
3.23
4.3
No date
Image Cleanup<= 1.9.2
Sensitive Data Exposure
10.6
5.3
No date
Image Cleanup<= 1.9.2
Broken Access Control
4.3
4.3
No date
User Spam Remover<= 1.1
Sensitive Data Exposure
10.6
5.3
No date
SMTP Mail<= 1.3.49
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Media Library Downloader<= 1.4.0
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Custom Sidebars by ProteusThemes<= 1.0.3
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
TNC Toolbox: Web Performance<= 2.0.4
Broken Access Control
4.3
4.3
No date
Quick Interest Slider<= 3.1.5
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Quick Interest Slider<= 3.1.5
Broken Access Control
10.6
5.3
No date
Flexmls® IDX<= 3.15.7
Open Redirection
9.4
4.7
No date
ConveyThis<= 268.10
Broken Access Control
10.6
5.3
No date
Featured Post Creative<= 1.5.5
Broken Access Control
3.23
4.3
No date
Giveaways and Contests by RafflePress<= 1.12.20
Cross Site Request Forgery (CSRF)
1.24
4.3
No date
Offload, AI &amp; Optimize with Cloudflare Images<= 1.9.5
Broken Access Control
6.5
6.5
Oct 21, 2025
CBX Bookmark & Favorite<= 2.0.1
Broken Access Control
4.3
4.3
No date
WP Google Review Slider<= 17.4
Broken Access Control
10.8
5.4
No date
WP YouTube Lyte<= 1.7.28
Open Redirection
13.6
3.4
No date
WP Social Ninja<= 3.20.1
Broken Access Control
29.9
6.5
Oct 15, 2025
Auto Prune Posts<= 3.0.0
Cross Site Request Forgery (CSRF)
0.81
6.5
No date
WP Content Pilot<= 2.1.7
Broken Access Control
5.4
5.4
No date
Geo Controller<= 8.9.4
Sensitive Data Exposure
12.19
5.3
No date
Login Page Customizer &#8211; Customizer Login Page, Admin Page, Custom Design<= 2.1.1
Broken Access Control
13
6.5
Oct 9, 2025
I Order Terms<= 1.5.0
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Media Library File Download<= 1.4
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
DoFollow Case by Case<= 3.5.1
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Slider Templates<= 1.0.3
Server Side Request Forgery (SSRF)
4.9
4.9
No date
WPComplete<= 2.9.5.3
Broken Access Control
18.29
5.3
No date
ThemeRain Core<= 1.1.9
Broken Access Control
10.6
5.3
No date
Sendle Shipping<= 6.02
Broken Access Control
10.6
5.3
No date
Raychat<= 2.2.1
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Headline Analyzer<= 1.3.7
Cross Site Scripting (XSS)
4.88
6.5
No date
BuddyForms<= 2.9.0
Broken Access Control
10.6
5.3
No date
Social proof testimonials and reviews by Repuso<= 5.29
Broken Access Control
4.3
4.3
No date
Easy Post Submission<= 1.7.0
Sensitive Data Exposure
10.6
5.3
No date
Product Catalog Simple<= 1.8.4
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
UPC/EAN/GTIN Code Generator<= 2.0.2
Cross Site Request Forgery (CSRF)
N/A
4.3
No date
Custom CSS<= 1.4.0
Broken Access Control
13
6.5
Sep 26, 2025
Export Categories<= 1.0
Broken Access Control
10.6
5.3
No date
Bulk Auto Image Title Attribute<= 2.0.1
Cross Site Scripting (XSS)
4.88
6.5
No date
USERCENTRICS CMP<= 1.0.9
Cross Site Scripting (XSS)
N/A
5.9
No date
Google+ Comments<= 1.0
Cross Site Scripting (XSS)
N/A
5.9
Jul 1, 2025
kontur Admin Style<= 1.0.4
Cross Site Scripting (XSS)
N/A
5.9
Jul 1, 2025
SEO Search Permalink<= 1.0.3
Cross Site Scripting (XSS)
N/A
5.9
Jul 1, 2025
Silencesoft RSS Reader<= 0.6
Cross Site Scripting (XSS)
N/A
5.9
Jul 1, 2025
Silencesoft RSS Reader<= 0.6
Server Side Request Forgery (SSRF)
N/A
5.4
Jul 1, 2025
Click &amp; Tweet<= 0.8.9
Cross Site Scripting (XSS)
N/A
5.9
Jul 14, 2025
Recaptcha &#8211; wp<= 0.2.6
Cross Site Scripting (XSS)
N/A
5.9
Jul 14, 2025
WP Tesseract<= 1.0.2
Cross Site Scripting (XSS)
N/A
5.9
Jul 14, 2025
PopAd<= 1.0.4
Server Side Request Forgery (SSRF)
N/A
4.4
Jul 14, 2025
NewsmanApp<= 2.7.7
Cross Site Request Forgery (CSRF)
1.78
7.1
Jul 31, 2025
Smart Related Products<= 2.0.6
Cross Site Scripting (XSS)
N/A
5.9
Jul 13, 2025
Nota Fiscal Eletrônica WooCommerce<= 3.4.0.9
Broken Access Control
6.45
4.3
Jul 13, 2025
Nota Fiscal Eletrônica WooCommerce<= 3.4.0.9
Cross Site Scripting (XSS)
1.11
5.9
Jul 13, 2025
MWW Disclaimer Buttons<= 3.41
Cross Site Scripting (XSS)
N/A
5.9
Apr 28, 2025
Notely<= 1.8.0
Cross Site Scripting (XSS)
N/A
5.9
May 4, 2025
Map Categories to Pages<= 1.3.2
Cross Site Scripting (XSS)
N/A
5.9
Jul 2, 2025
Lenix scss compiler<= 1.2
Cross Site Request Forgery (CSRF)
1.61
4.3
Jul 3, 2025
Lenix scss compiler<= 1.2
Cross Site Scripting (XSS)
N/A
5.9
Jul 3, 2025
Netgsm<= 2.9.62
Broken Access Control
3.23
4.3
Jul 3, 2025
Simple Meta Tags<= 1.5
Cross Site Scripting (XSS)
3.66
6.5
Jul 3, 2025
The Tribal<= 1.3.3
Cross Site Scripting (XSS)
N/A
5.9
Jul 3, 2025
The Tribal<= 1.3.3
Sensitive Data Exposure
7.95
5.3
Jul 3, 2025
Post Featured Video<= 1.7
Cross Site Request Forgery (CSRF)
2.15
4.3
Jul 12, 2025
User Notes<= 1.0.2
Cross Site Scripting (XSS)
N/A
5.9
Jul 12, 2025
WeShare Buttons<= 13.0.0
Cross Site Scripting (XSS)
N/A
5.9
Jul 12, 2025
WP Media Categories<= 2.1.0
Cross Site Request Forgery (CSRF)
2.15
4.3
Jul 12, 2025
PE Easy Slider<= 1.1.0
Cross Site Scripting (XSS)
N/A
5.9
Jul 13, 2025
Video Blogster Lite<= 1.2
Cross Site Request Forgery (CSRF)
3.55
7.1
Jul 13, 2025
Werk aan de Muur<= 1.5
Cross Site Scripting (XSS)
N/A
5.9
Jul 13, 2025
WEDOS Global<= 1.2.2
Broken Access Control
10.6
5.3
Jul 15, 2025
Yext<= 1.1.3
Broken Access Control
10.6
5.3
Jul 15, 2025
CopySafe Web Protection<= 5.1
Broken Access Control
5.4
5.4
Jul 20, 2025
YayCurrency<= 3.3.1
Remote Code Execution (RCE)
N/A
6.6
Apr 20, 2025
Ultimate WP Mail<= 1.3.8
Cross Site Scripting (XSS)
3.66
6.5
Jul 4, 2025
CashBill.pl &#8211; Płatności WooCommerce<= 3.2.1
Cross Site Scripting (XSS)
N/A
5.9
Jul 4, 2025
SEO Backlink Monitor<= 1.6.0
Cross Site Request Forgery (CSRF)
1.61
4.3
Jul 4, 2025
SEO Backlink Monitor<= 1.6.0
Server Side Request Forgery (SSRF)
N/A
4.4
Jul 4, 2025
AffiliateWP – External Referral Links<= 1.2.0
Cross Site Scripting (XSS)
N/A
5.9
Jul 5, 2025
Beaf<= 1.6.2
Server Side Request Forgery (SSRF)
N/A
4.4
Jul 5, 2025

Report vulnerabilities to earn bounties and rewards!

Read more