← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2026-28130
WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28126
WordPress RH Frontend Publishing Pro plugin < 4.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28122
WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28072
WordPress pixfort Core plugin <= 3.2.22 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28071
WordPress pixfort Core plugin <= 3.2.22 - Broken Access Control vulnerability
CVE-2026-25461
WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25460
WordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2026-25459
WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
CVE-2025-68906
WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68905
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability