← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-64211
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2025-64214
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability
CVE-2025-62018
WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
CVE-2025-62017
WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
CVE-2025-60103
WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability
CVE-2025-60100
WordPress XStore theme < 9.6 - Content Injection vulnerability
CVE-2025-60097
WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability
CVE-2025-60096
WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability
CVE-2025-49925
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability
CVE-2025-48107
WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability