← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2025-26969
WordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability
CVE-2025-26902
WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-26901
WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability
CVE-2025-24653
WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability
CVE-2025-22763
WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56275
WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-56006
WordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability
CVE-2024-43968
WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability
CVE-2024-43949
WordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerability
CVE-2024-43925
WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability