← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2024-51666
WordPress Tours plugin <= 1.0.0 - Broken Access Control vulnerability
CVE-2025-22702
WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability
CVE-2024-50500
WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability
CVE-2024-44055
WordPress Oshine Modules plugin < 3.3.6 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
CVE-2025-24537
WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24533
WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24540
WordPress Website Builder by SeedProd plugin <= 6.18.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24649
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2 - Broken Access Control vulnerability
CVE-2024-51919
WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability
CVE-2024-56273
WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability