Muhamad Visat

2020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#354

of 3,238 researchers

Vulns

12

Critical0

High5

Medium7

Low0

Affected Assets

8

8plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

12 records


2026-01-05 15:12	CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter CBX Bookmark & Favorite <= 2.0.4	`CVE-2025-13652`	6.5 Medium	Muhamad Visat	Yes
2025-12-13 16:20	wpForo Forum <= 2.4.12 - Unauthenticated SQL Injection wpForo Forum <= 2.4.12	`CVE-2025-13126`	7.5 High	Muhamad Visat	Yes
2025-12-12 15:01	404 Solution <= 3.1.0 - Authenticated (Admin+) SQL Injection via 'filterText' Parameter 404 Solution <= 3.1.0	`CVE-2025-14477`	4.9 Medium	Muhamad Visat	Yes
2025-05-05 20:26	Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter Depicter <= 3.6.1	`CVE-2025-2011`	7.5 High	Muhamad Visat	Yes
2025-04-16 00:00	Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injection Ultimate Member <= 2.10.1	`CVE-2026-15290`	7.5 High	Muhamad Visat	Yes
2025-03-27 19:32	Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter Advanced Google reCAPTCHA <= 1.29	`CVE-2025-2074`	5.3 Medium	Muhamad Visat	Yes
2025-03-06 22:02	SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter GEO Plugin by Squirrly SEO <= 12.4.05	`CVE-2025-1768`	6.5 Medium	Muhamad Visat	Yes
2020-04-01 00:00	Login by Auth0 <= 3.11.3 - Insecure Direct Object Reference Login by Auth0 <= 3.11.3	`CVE-2020-7948`	4.3 Medium	Muhamad Visat	Yes
2020-04-01 00:00	Login by Auth0 <= 3.11.3 - Stored Cross-Site Scripting Login by Auth0 <= 3.11.3	`CVE-2020-6753`	7.2 High	Muhamad Visat	Yes
2020-04-01 00:00	Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery Login by Auth0 <= 3.11.3	`CVE-2020-5391`	8.8 High	Muhamad Visat	Yes

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C