← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2024-39623
WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability
CVE-2024-39624
WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability
CVE-2024-39621
WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability
CVE-2024-39622
WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability
CVE-2024-39620
WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability
CVE-2024-38795
WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability
CVE-2024-38706
WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability
CVE-2024-37943
WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37518
WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37481
WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability