Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Saad Iqbal — Vulnerabilities & Security Advisories 48

Browse all 48 CVE security advisories affecting Saad Iqbal. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Saad Iqbal is a security researcher with thirty-seven assigned CVEs, primarily focusing on vulnerability discovery within widely used software ecosystems. His work predominantly targets remote code execution, cross-site scripting, and privilege escalation flaws, often affecting enterprise applications and open-source libraries. Iqbal’s contributions highlight systemic weaknesses in input validation and access control mechanisms, demonstrating a consistent pattern of identifying critical logic errors that allow unauthorized system access. Notable incidents include disclosures that forced immediate patches for high-profile platforms, underscoring the severity of the identified defects. His research emphasizes the importance of rigorous code auditing and secure development practices. By documenting these vulnerabilities, Iqbal aids developers in strengthening their security postures, reducing the attack surface for potential adversaries, and promoting broader industry awareness regarding common exploitation vectors in modern software architectures.

CVE ID Title CVSS Severity Published
CVE-2025-49857 WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability — myCred CWE-862 4.3 Medium 2025-06-17
CVE-2025-49872 WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability — myCred CWE-862 5.3 Medium 2025-06-17
CVE-2025-48245 WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerability — Quick Contact Form CWE-79 7.1 High 2025-05-23
CVE-2025-47688 WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability — Advanced File Manager CWE-862 5.3 Medium 2025-05-07
CVE-2025-32522 WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability — License Manager for WooCommerce CWE-79 7.1 High 2025-04-17
CVE-2025-31805 WordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerability — Gutena Kit – Gutenberg Blocks and Templates CWE-79 6.5 Medium 2025-04-01
CVE-2025-30609 WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability — AppExperts CWE-201 5.3 Medium 2025-03-24
CVE-2025-22736 WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability — User Management CWE-266 8.8 High 2025-01-15
CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability — Post SMTP CWE-862 4.3 Medium 2025-01-13
CVE-2024-54323 WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability — New User Approve CWE-862 5.4 Medium 2024-12-13
CVE-2024-52436 WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability — Post SMTP CWE-89 7.6 High 2024-11-18
CVE-2024-52403 WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability — User Management CWE-434 9.9 Critical 2024-11-16
CVE-2024-49702 WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability — myCred Elementor CWE-79 6.5 Medium 2024-10-24
CVE-2024-47338 WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability — WPExperts Square For GiveWP CWE-89 8.5 High 2024-10-06
CVE-2024-43214 WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability — myCred CWE-862 5.3 Medium 2024-08-26
CVE-2024-43354 WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability — myCred CWE-502 9.8 Critical 2024-08-19
CVE-2024-43353 WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability — myCred CWE-79 6.5 Medium 2024-08-18
CVE-2024-32711 WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability — myCred CWE-79 6.5 Medium 2024-04-24

This page lists every published CVE security advisory associated with Saad Iqbal. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.