Md. Moniruzzaman Prodhan (NomanProdhan)

20252026

Critical

High

Medium

Low

Global Rank

#99

of 3,238 researchers

Vulns

62

Critical1

High6

Medium55

Low0

Affected Assets

57

57plugins

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

62 records


2026-07-28 21:21	MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion MasterStudy LMS WordPress Plugin <= 3.7.23	`CVE-2026-5060`	6.5 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-07-28 21:17	Klubraum Membership Request <= 1.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Update Klubraum Membership Request <= 1.1.0	`CVE-2026-4604`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-07-09 19:11	Easy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' Parameter Easy Upload Files During Checkout <= 3.0.1	`CVE-2026-6802`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-07-08 20:53	Employee, Leave and Recruitment Management System <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Job Deletion via crewhrm_singleJobAction AJAX Action Employee, Leave and Recruitment Managem… <= 1.2.2	`CVE-2026-9237`	4.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-07-01 00:00	Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure Academy LMS <= 3.8.1	`CVE-2026-5348`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-06-05 15:42	Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action Booking Package <= 1.7.16	`CVE-2026-9851`	7.2 High	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-05-21 19:07	Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action Ditty <= 3.1.65	`CVE-2026-9011`	7.5 High	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-05-12 17:11	ilGhera Support System for WooCommerce <= 1.3.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure ilGhera Support System for WooCommerce <= 1.3.0	`CVE-2025-14033`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-05-01 19:18	FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler FundPress <= 2.0.8	`CVE-2026-4650`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-04-23 16:30	Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover Booking Calendar Contact Form <= 1.2.63	`CVE-2026-6810`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes

Showing 1–10 of 62 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C