← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2026-28175
WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66707
WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66702
WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66705
WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57748
WordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2026-56068
WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability
CVE-2025-58668
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
CVE-2025-24750
WordPress ExactMetrics plugin <= 8.1.0 - Broken Access Control vulnerability
CVE-2025-24568
WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-56057
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability