← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
214 vulnerability records and advisories credit this contributor.
CVE-2025-26871
WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability
CVE-2025-26733
WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
CVE-2025-24753
WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability
CVE-2025-24751
WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability
CVE-2025-24750
WordPress ExactMetrics plugin <= 8.1.0 - Broken Access Control vulnerability
CVE-2025-24739
WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24738
WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24654
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability
CVE-2025-24649
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2 - Broken Access Control vulnerability
CVE-2025-24648
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2.1 - Privilege Escalation vulnerability