← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
238 vulnerability records and advisories credit this contributor.
CVE-2023-51360
WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability
CVE-2023-51359
WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability
CVE-2023-48739
WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerability
CVE-2023-48758
WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
CVE-2025-68906
WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68905
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
CVE-2025-68904
WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68510
WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability
CVE-2025-53420
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53236
WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability