Md. Moniruzzaman Prodhan (NomanProdhan)

Md. Moniruzzaman Prodhan (NomanProdhan) is a security researcher credited with 69 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #96 of 3,899 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 47 findings.

Their research concentrates on Missing Authorization, which accounts for 42 of their findings (61%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Scripting. The average CVSS score across these disclosures is 5.8, peaking at 9.8. Severity breakdown: 3 critical and 11 high.

The most affected software includes Booking Calendar Contact Form (2), Frontend Post Submission Manager Lite (2), ilGhera Support System for WooCommerce (2), across 64 distinct plugins, themes and core versions in total.

64 of the 69 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data", scores 9.8 out of 10.

20252026
Critical
High
Medium
Low
Global Rank

#96

of 3,899 researchers

Vulns

70

Critical3
High11
Medium56
Low0
Affected Assets

65

65plugins
Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

69 records
2026-10-16 14:25CVE-2026-107762
7.5
High
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-10-13 15:38CVE-2026-100153
7.2
High
Md. Moniruzzaman Prodhan (NomanProdhan)No
2026-09-30 14:44CVE-2026-92245
7.5
High
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-09-18 18:58CVE-2026-85658
8.1
High
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-09-18 14:11CVE-2026-89274
9.1
Critical
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-08-04 19:34CVE-2026-4431
9.1
Critical
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-08-04 18:26CVE-2026-6079
7.3
High
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-07-28 21:21CVE-2026-5060
6.5
Medium
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-07-28 21:17CVE-2026-4604
5.3
Medium
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
2026-07-09 19:11CVE-2026-6802
5.3
Medium
Md. Moniruzzaman Prodhan (NomanProdhan)Yes
Showing 1–10 of 69 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C