← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2025-26976
WordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability
CVE-2025-26970
WordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerability
CVE-2025-26966
WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability
CVE-2025-26961
WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability
CVE-2025-26956
WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
CVE-2025-26936
WordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerability
CVE-2025-26916
WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-26898
WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability
CVE-2025-26888
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability
CVE-2025-26873
WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability