← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2026-95607
WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability
CVE-2026-96328
WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
CVE-2026-93947
WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability
CVE-2026-42414
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
CVE-2026-42415
WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
CVE-2026-42416
WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability
CVE-2026-42417
WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
CVE-2026-97253
WordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27432
WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-84815
WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability