← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2026-57748
WordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2026-56068
WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability
CVE-2025-58668
WordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability
CVE-2025-24750
WordPress ExactMetrics plugin <= 8.1.0 - Broken Access Control vulnerability
CVE-2025-24568
WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-56057
WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability
CVE-2024-56054
WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability
CVE-2024-50422
WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability
CVE-2024-50454
WordPress SEOPress plugin <= 8.1.1 - Unauthenticated Broken Access Control vulnerability
CVE-2024-50455
WordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability