← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2026-96339
WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96329
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
CVE-2026-96330
WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability
CVE-2026-42712
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
CVE-2026-42631
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42632
WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94415
WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96327
WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability
CVE-2026-94166
WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105436
WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability