← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2024-37472
WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37444
WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability
CVE-2024-37275
WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37255
WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
CVE-2024-37242
WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-35700
WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability
CVE-2024-33571
WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-33570
WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability
CVE-2024-32568
WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-32523
WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability