Muhammad Nur Ibnu Hubab

Muhammad Nur Ibnu Hubab is a security researcher credited with 117 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #64 of 3,333 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 81 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 73 of their findings (62%). Other recurring categories include Cross-Site Scripting, Missing Authorization. The average CVSS score across these disclosures is 4.7, peaking at 7.5. Severity breakdown: 0 critical and 1 high.

The most affected software includes SurveyJS (4), Alfie (2), Anomify AI (2), across 106 distinct plugins, themes and core versions in total.

19 of the 117 disclosed issues have a vendor fix, while 98 remain unpatched.

20252026
Critical
High
Medium
Low
Global Rank

#64

of 3,333 researchers

Vulns

117

Critical0
High1
Medium116
Low0
Affected Assets

106

106plugins
Avg CVSS

4.7

Average score of vulnerabilities

Researcher Submissions

117 records
2026-07-10 14:05CVE-2026-3367
4.4
Medium
Muhammad Nur Ibnu HubabYes
2026-06-23 16:38CVE-2026-8905
6.1
Medium
Muhammad Nur Ibnu HubabNo
2026-06-23 16:37CVE-2026-6292
4.3
Medium
Muhammad Nur Ibnu HubabNo
2026-06-08 15:06CVE-2026-8910
6.1
Medium
Muhammad Nur Ibnu HubabNo
2026-06-08 15:05CVE-2026-8909
4.3
Medium
Muhammad Nur Ibnu HubabNo
2026-06-08 15:05CVE-2026-8907
6.1
Medium
Muhammad Nur Ibnu HubabNo
2026-06-01 19:43CVE-2026-8422
4.3
Medium
Muhammad Nur Ibnu HubabNo
2026-05-26 19:07CVE-2026-8906
6.1
Medium
Muhammad Nur Ibnu HubabNo
2026-05-26 17:23CVE-2026-8911
6.1
Medium
Muhammad Nur Ibnu HubabNo
2026-05-26 17:23CVE-2026-9014
5.3
Medium
Muhammad Nur Ibnu HubabNo
Showing 1–10 of 117 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C