Nabil Irawan

20252026

Critical

High

Medium

Low

Global Rank

#4

of 3,203 researchers

Vulns

735

Critical7

High31

Medium695

Low2

Affected Assets

697

688plugins9themes

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

735 records


2026-07-27 19:42	WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection WP Fast Total Search <= 1.80.280	`CVE-2026-12741`	7.5 High	Nabil Irawan	No
2026-07-23 00:00	3D Flipbook PDF Viewer & Embedder <= 1.4.2 - Unauthenticated Server-Side Request Forgery Flipbook PDF Viewer & Embedder <= 1.4.2	`CVE-2026-59552`	7.2 High	Nabil Irawan	Yes
2026-07-22 00:00	eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization eRoom <= 1.7.1	`CVE-2026-25427`	4.3 Medium	Nabil Irawan	No
2026-07-22 00:00	Ebook Store <= 6.19 - Missing Authorization Ebook Store <= 6.19	`CVE-2026-65453`	5.3 Medium	Nabil Irawan	Yes
2026-07-22 00:00	Create <= 2.5.3 - Authenticated (Contributor+) SQL Injection Create <= 2.5.3	`CVE-2026-24552`	6.5 Medium	Nabil Irawan	No
2026-07-22 00:00	Mediavine Control Panel <= 2.10.10 - Missing Authorization Mediavine Control Panel <= 2.10.10	`CVE-2026-25424`	4.3 Medium	Nabil Irawan	No
2026-07-16 00:00	Premium Packages – Sell Digital Products Securely <= 6.2.0 - Missing Authorization Premium Packages <= 6.2.0	`CVE-2026-61943`	5.3 Medium	Nabil Irawan	Yes
2026-07-09 17:59	Hide My WP Lite <= 1.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'he_wrapper_js' Parameter Hide My WP Lite <= 1.3	`CVE-2026-13347`	7.5 High	Nabil Irawan	No
2026-07-08 00:00	Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter Block, Suspend, Report for BuddyPress <= 3.6.4	`CVE-2026-4653`	6.4 Medium	Nabil Irawan	Yes
2026-07-07 16:30	Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities Backstage <= 1.4.2	`CVE-2026-9842`	7.5 High	Nabil Irawan	No

Showing 1–10 of 735 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C