Muhammad Zeeshan (Xib3rR4dAr)

202020212022202320242025

Critical

High

Medium

Low

Global Rank

#126

of 3,238 researchers

Vulns

45

Critical6

High10

Medium29

Low0

Affected Assets

17

14plugins3themes

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

45 records


2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter Fancy Product Designer <= 6.4.8	`CVE-2025-15526`	5.3 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition Fancy Product Designer <= 6.4.8	`CVE-2025-13231`	6.5 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter Fancy Product Designer <= 6.4.8	`CVE-2025-13439`	5.9 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-11 18:11	Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload Fancy Product Designer <= 6.4.8	`CVE-2025-12570`	7.2 High	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-02-08 00:00	Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting Super Store Finder <= 7.0	`CVE-2024-13440`	8.2 High	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-03-28 00:00	Responsive <= 5.0.2 - Missing Authorization to HTML Injection Responsive <= 5.0.2	`CVE-2024-2848`	7.5 High	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-03-26 00:00	Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization Networker - Tech News WordPress Theme w… <= 1.1.9	`CVE-2024-2962`	5.3 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-03-20 00:00	Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing Avada <= 7.11.6	`CVE-2024-2340`	5.3 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-03-20 00:00	Avada <= 7.11.6 - Authenticated (Contributor+) Server-Side Request Forgery via form_to_url_action Avada <= 7.11.6	`CVE-2024-2343`	6.4 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-03-20 00:00	Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor Permalink Manager Lite <= 2.4.3.1	`CVE-2024-2543`	4.3 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes

Showing 1–10 of 45 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C