← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2025-24568
WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24540
WordPress Website Builder by SeedProd plugin <= 6.18.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24537
WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24533
WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-22800
WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability
CVE-2025-22702
WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability
CVE-2025-22701
WordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-22700
WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability
CVE-2025-22699
WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability
CVE-2025-22260
WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability