Mahmudul Hasan Arif vulnerabilities and threats

8 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.3	EPSS 0.2%	CVE-2026-96821FluentBoards (WordPress plugin) · Incorrect Privilege Assignment Medium6.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96821 Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions. EPSS 0.2%Vulnerability Mahmudul Hasan Arif CWE-266	CVE Database V5	2026-09-30
Medium	5.3	EPSS 0.3%	CVE-2026-65521Mahmudul Hasan Arif WP Social Ninja · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65521 Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. EPSS 0.3%Vulnerability CWE-497	CVE Database V5	2026-07-23
High	8.1	EPSS 0.2%	CVE-2026-40784FluentBoards (WordPress plugin) · Insecure Direct Object Reference High8.1EPSS 0.2%2026-04-15CVE Database V5CVE-2026-40784 Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2. EPSS 0.2%Vulnerability Mahmudul Hasan Arif	CVE Database V5	2026-04-15
Medium	5.4	EPSS 0.3%	CVE-2026-24561FluentBoards (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-23CVE Database V5CVE-2026-24561 Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.1. EPSS 0.3%Vulnerability Mahmudul Hasan Arif	CVE Database V5	2026-01-23
Medium	6.5	EPSS 0.2%	CVE-2025-64375Mahmudul Hasan Arif WP Social Ninja · Missing Authorization Medium6.5EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64375 Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <= 3.20.1. EPSS 0.2%Vulnerability	CVE Database V5	2025-12-18
Medium	5.3	EPSS 0.3%	CVE-2025-58797Ninja Charts (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2025-09-05CVE Database V5CVE-2025-58797 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Charts ninja-charts allows Retrieve Embedded Sensitive Data.This issue affects Ninja Charts: from n/a through <= 3.3.5. EPSS 0.3%Vulnerability Mahmudul Hasan Arif	CVE Database V5	2025-09-05
Medium	6.5	EPSS 0.3%	CVE-2025-50034Enhanced Blocks (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-06-20CVE Database V5CVE-2025-50034 Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Blocks – Page Builder Blocks for Gutenberg: from n/a through <= 1.4.1. EPSS 0.3%Vulnerability Mahmudul Hasan Arif	CVE Database V5	2025-06-20
Critical	9.8	EPSS 0.5%	CVE-2025-39551FluentBoards (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-04-17CVE Database V5CVE-2025-39551 Deserialization of Untrusted Data vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Object Injection.This issue affects FluentBoards: from n/a through <= 1.47. EPSS 0.5%Vulnerability Mahmudul Hasan Arif	CVE Database V5	2025-04-17

Page 1 of 1