← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2024-48044
WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerability
CVE-2024-47635
WordPress TinyPNG plugin <= 3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-47358
WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerability
CVE-2024-47359
WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability
CVE-2024-47361
WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability
CVE-2024-47305
WordPress Use Any Font plugin <= 6.3.08 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-45454
WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-44044
WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-44000
WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
CVE-2024-44006
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability