← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-47586
WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-47579
WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability
CVE-2025-47452
WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability
CVE-2025-39362
WordPress Mollie Payments for WooCommerce plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-32282
WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31022
WordPress PayU India plugin < 3.8.8 - Account Takeover vulnerability
CVE-2025-31019
WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability
CVE-2025-30960
WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability
CVE-2025-30964
WordPress Photography theme < 7.7.6 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-30962
WordPress FS Poster plugin <= 6.5.8 - Reflected Cross Site Scripting (XSS) vulnerability