← All credits
Muhammad Daffa (Patchstack Alliance)
95 vulnerability records and advisories credit this contributor.
CVE-2022-47172
WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-45068
WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-5059
WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
CVE-2024-43997
WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-43983
WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43984
WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability
CVE-2024-43309
WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43310
WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability
CVE-2024-34754
WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability
CVE-2024-33924
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability