← All credits

Rafie Muhammad | Patchstack Bug Bounty Program

238 vulnerability records and advisories credit this contributor.

WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability

WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability

WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability

WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability

WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability

WordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerability

WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability