← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2025-60103
WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability
CVE-2025-60100
WordPress XStore theme < 9.6 - Content Injection vulnerability
CVE-2025-60097
WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability
CVE-2025-60096
WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability
CVE-2025-49925
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
CVE-2025-48107
WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47586
WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-47579
WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability
CVE-2025-47452
WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability
CVE-2025-39362
WordPress Mollie Payments for WooCommerce plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability