Muhamad Hidayat

Muhamad Hidayat is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #455 of 3,515 contributors. Their disclosures were published between 2022 and 2024. The most productive year was 2022, with 9 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 4 of their findings (40%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 6.0, peaking at 8.8. Severity breakdown: 0 critical and 2 high.

The most affected software includes AdRotate Banner Manager (2), Easy Digital Downloads (2), Booking for Appointments and Events… (1), across 8 distinct plugins, themes and core versions in total.

9 of the 10 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "JivoChat Live Chat – WP live chat plugin for WordPress <= 1.3.5.3 - Cross-Site Request Forgery to Cross-Site Scripting", scores 8.8 out of 10.

202220232024

Critical

High

Medium

Low

Global Rank

#455

of 3,515 researchers

Vulns

Critical0

High2

Medium8

Low0

Affected Assets

8plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

10 records


2024-11-28 00:00	Chatter <= 1.0.1 - Missing Authorization Chatter <= 1.0.1	`CVE-2024-53785`	4.3 Medium	Muhamad Hidayat	No
2022-05-30 00:00	Print, PDF, Email by PrintFriendly <= 5.2.2 - Authenticated (Admin+) Cross-Site Scripting Print, PDF & Email by PrintFriendly < 5.2.3	`CVE-2022-0663`	5.5 Medium	Muhamad Hidayat	Yes
2022-05-09 00:00	JivoChat Live Chat – WP live chat plugin for WordPress <= 1.3.5.3 - Cross-Site Request Forgery to Cross-Site Scripting JivoChat Live Chat <= 1.3.5.3	`CVE-2022-0642`	8.8 High	Muhamad Hidayat	Yes
2022-04-11 00:00	AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names AdRotate Banner Manager < 5.8.23	`CVE-2022-0649`	5.5 Medium	Muhamad Hidayat	Yes
2022-04-11 00:00	AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names AdRotate Banner Manager < 5.8.23	`CVE-2022-0662`	5.5 Medium	Muhamad Hidayat	Yes
2022-04-10 00:00	ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery ThirstyAffiliates <= 3.10.4	`CVE-2022-0634`	5.4 Medium	Muhamad Hidayat	Yes
2022-04-09 00:00	Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery Easy Digital Downloads < 2.11.6	`CVE-2022-0707`	8.8 High	Muhamad Hidayat	Yes
2022-03-28 00:00	Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting Easy Digital Downloads < 2.11.6	`CVE-2022-0706`	5.5 Medium	Muhamad Hidayat	Yes
2022-02-25 00:00	Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion Simple Membership < 4.1.0	`CVE-2022-0681`	6.5 Medium	Muhamad Hidayat	Yes
2022-02-23 00:00	Amelia <= 1.0.46 - Cross-Site Request Forgery Booking for Appointments and Events… <= 1.0.46	`CVE-2022-0616`	4.3 Medium	Muhamad Hidayat	Yes

Showing 1–10 of 10 reports