← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2024-56054
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
CVE-2024-50422
WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability
CVE-2024-50454
WordPress SEOPress plugin <= 8.1.1 - Unauthenticated Broken Access Control vulnerability
CVE-2024-50455
WordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability
CVE-2024-50424
WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
CVE-2024-50456
WordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability
CVE-2024-48043
WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability
CVE-2025-58660
WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability
CVE-2025-58667
WordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerability
CVE-2025-47577
WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability