Skip to content
OpenAdvisories

Vendor

Mahmudul Hasan Arif

8 known vulnerabilities.

Mahmudul Hasan Arif at a glance

Last 12 months
5
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202600
Jan 202610
Dec 202510
Nov 202500
Oct 202500
Sep 202510
Aug 202500
Jul 202500
Jun 202510
May 202500
Apr 202511
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

FluentBoards 4 WP Social Ninja 2 Enhanced Blocks – Page Builder Blocks for Gutenberg 1 Ninja Charts 1
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.3
    CVE-2026-96821

    WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

    Mahmudul Hasan Arif FluentBoards
  • Medium 5.3
    CVE-2026-65521

    WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

    Mahmudul Hasan Arif WP Social Ninja
  • High 8.1
    CVE-2026-40784

    WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2.

    Mahmudul Hasan Arif FluentBoards
  • Medium 5.4
    CVE-2026-24561

    WordPress FluentBoards plugin <= 1.91.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.1.

    Mahmudul Hasan Arif FluentBoards
  • Medium 6.5
    CVE-2025-64375

    WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <= 3.20.1.

    Mahmudul Hasan Arif WP Social Ninja
  • Medium 5.3
    CVE-2025-58797

    WordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Charts ninja-charts allows Retrieve Embedded Sensitive Data.This issue affects Ninja Charts: from n/a through <= 3.3.5.

    Mahmudul Hasan Arif Ninja Charts
  • Medium 6.5
    CVE-2025-50034

    WordPress Enhanced Blocks – Page Builder Blocks for Gutenberg plugin <= 1.4.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Blocks – Page Builder Blocks for…

    Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg
  • Critical 9.8
    CVE-2025-39551

    WordPress FluentBoards plugin <= 1.47 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Object Injection.This issue affects FluentBoards: from n/a through <= 1.47.

    Mahmudul Hasan Arif FluentBoards