← All credits

Rafie Muhammad | Patchstack Bug Bounty Program

238 vulnerability records and advisories credit this contributor.

WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability

WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability

WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability

WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability

WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability

WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability