Abdi Pranata

Abdi Pranata is a security researcher credited with 463 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #15 of 3,515 contributors. Their disclosures were published between 2023 and 2025. The most productive year was 2023, with 209 findings.

Their research concentrates on Missing Authorization, which accounts for 207 of their findings (45%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting. The average CVSS score across these disclosures is 5.3, peaking at 10.0. Severity breakdown: 4 critical and 17 high.

The most affected software includes VikBooking Hotel Booking Engine & PMS (9), WebToffee WP Backup and Migration (3), Analytify (2), across 432 distinct plugins, themes and core versions in total.

298 of the 463 disclosed issues have a vendor fix, while 165 remain unpatched. The most severe finding, "Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution", scores 10.0 out of 10.

202320242025

Critical

High

Medium

Low

Global Rank

#15

of 3,515 researchers

Vulns

463

Critical4

High17

Medium439

Low3

Affected Assets

454

454plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

463 records


2025-05-16 00:00	Spotlight - Social Media Feeds (Premium) <= 1.7.1 - Unauthenticated Information Exposure Spotlight Social Feeds <= 1.7.1	`CVE-2025-39498`	5.3 Medium	Abdi Pranata	Yes
2025-04-14 00:00	TableOn – WordPress Posts Table Filterable <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting TableOn <= 1.0.3	`CVE-2025-32592`	6.1 Medium	Abdi Pranata	Yes
2025-04-11 00:00	Listings for Buildium <= 0.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting Listings for Buildium <= 0.1.5	`CVE-2025-32606`	6.1 Medium	Abdi Pranata	Yes
2025-04-10 00:00	WP AutoKeyword <= 1.0 - Reflected Cross-Site Scripting WP AutoKeyword <= 1.0	`CVE-2025-32582`	6.1 Medium	Abdi Pranata	No
2025-04-10 00:00	Coming Soon Countdown <= 2.2 - Reflected Cross-Site Scripting Coming Soon Countdown <= 2.2	`CVE-2025-32578`	6.1 Medium	Abdi Pranata	No
2025-04-10 00:00	Restrict User Registration <= 1.0.1 Cross-Site Request Forgery to Stored Cross-Site Scripting Restrict User Registration <= 1.0.1	`CVE-2025-32655`	6.1 Medium	Abdi Pranata	No
2025-04-09 00:00	KeyCAPTCHA <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting KeyCAPTCHA <= 2.5.1	`CVE-2025-32619`	6.1 Medium	Abdi Pranata	No
2025-04-09 00:00	WordPress Spam Blocker <= 2.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting Spam Blocker <= 2.0.4	`CVE-2025-32581`	6.1 Medium	Abdi Pranata	No
2025-04-09 00:00	WP Map Route Planner <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting WP Map Route Planner <= 1.0.0	`CVE-2025-32621`	6.1 Medium	Abdi Pranata	No
2025-04-09 00:00	Multiple Location Google Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting Multiple Location Google Map <= 1.1	`CVE-2025-32617`	6.1 Medium	Abdi Pranata	No

Showing 1–10 of 250 reports

Showing the 250 most recent of 463 records. Every record has its own page and is listed in the sitemap.