← All credits

Rafie Muhammad | Patchstack Bug Bounty Program

213 vulnerability records and advisories credit this contributor.

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability

WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

WordPress WPLMS plugin <= 1.9.9 - Arbitrary Option Update to Privilege Escalation vulnerability

WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability

WordPress VibeBP plugin < 1.9.9.5.1 - SQL Injection vulnerability

WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability

WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability

WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability