← All credits
Rafie Muhammad
25 vulnerability records and advisories credit this contributor.
CVE-2026-4798
Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter
CVE-2026-4782
Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter
CVE-2023-3295
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2022-1985
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
CVE-2022-2046
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload