← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2025-67919
WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-67918
WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67917
WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
CVE-2025-67566
WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability
CVE-2025-64378
WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability
CVE-2025-64212
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability
CVE-2025-64211
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2025-64214
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability
CVE-2025-62018
WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
CVE-2025-62017
WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability