← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2025-24739
WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24738
WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24648
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2.1 - Privilege Escalation vulnerability
CVE-2025-24654
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability
CVE-2025-22800
WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability
CVE-2025-22700
WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability
CVE-2025-22701
WordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-22699
WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability
CVE-2025-22260
WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability
CVE-2025-14358
WordPress REHub Framework plugin <= 19.9.5 - Broken Access Control vulnerability