← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2024-30503
WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-30229
WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
CVE-2024-29931
WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29792
WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29777
WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27987
WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27971
WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability
CVE-2024-25599
WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-23500
WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-11620
WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability