← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2024-37255
WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
CVE-2024-37242
WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-35700
WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability
CVE-2024-33571
WordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-32568
WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-30503
WordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29931
WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27987
WordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability