Rafshanzani Suhada

20222023202420252026

Critical

High

Medium

Low

Global Rank

#53

of 3,257 researchers

Vulns

142

Critical1

High15

Medium125

Low1

Affected Assets

111

111plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

142 records


2026-05-01 00:00	Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint Dokan: AI Powered WooCommerce Multivend… <= 4.3.1	`CVE-2026-3504`	5.3 Medium	Rafshanzani Suhada	Yes
2026-04-16 16:42	Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields Quiz and Survey Master (QSM) <= 10.1.0	`CVE-2026-5797`	5.3 Medium	Rafshanzani Suhada	Yes
2026-02-18 14:58	ACF Photo Gallery Field <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification ACF Photo Gallery Field <= 3.0	`CVE-2025-12081`	4.3 Medium	Rafshanzani Suhada	Yes
2026-02-18 14:54	Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure WPLP Cookie Consent <= 4.1.2	`CVE-2025-11754`	7.5 High	Rafshanzani Suhada	Yes
2026-02-18 00:00	Mesmerize Companion <= 1.6.158 - Missing Authorization Authenticated (Subscriber+) Settings Update Mesmerize Companion <= 1.6.158	`CVE-2025-12027`	4.3 Medium	Rafshanzani Suhada	Yes
2026-02-18 00:00	Smartsupp – live chat, AI shopping assistant and chatbots <= 3.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Smartsupp <= 3.9.1	`CVE-2025-12448`	6.4 Medium	Rafshanzani Suhada	Yes
2026-02-18 00:00	Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens Popup Builder <= 4.4.2	`CVE-2025-13079`	5.3 Medium	Rafshanzani Suhada	Yes
2026-02-18 00:00	Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure Web Accessibility by accessiBe <= 2.11	`CVE-2025-13113`	5.3 Medium	Rafshanzani Suhada	Yes
2025-12-18 20:25	myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure Points Management System For Gamificati… <= 2.9.7.1	`CVE-2025-12361`	4.3 Medium	Rafshanzani Suhada	Yes
2025-12-12 17:05	myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval Points Management System For Gamificati… <= 2.9.7	`CVE-2025-12362`	5.3 Medium	Rafshanzani Suhada	Yes

Showing 1–10 of 142 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C