← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2024-56212
WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability
CVE-2024-56211
WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability
CVE-2024-56210
WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56209
WordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56057
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
CVE-2024-56055
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary Directory Deletion vulnerability
CVE-2024-56054
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
CVE-2024-56053
WordPress WPLMS plugin < 1.9.9.5.3 - Instructor+ SQL Injection vulnerability
CVE-2024-56052
WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability
CVE-2024-56051
WordPress WPLMS plugin < 1.9.9.5 - Student+ Remote Code Execution (RCE) vulnerability