← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-24537
WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24533
WordPress MetaSlider plugin <= 3.92.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24540
WordPress Website Builder by SeedProd plugin <= 6.18.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24649
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2 - Broken Access Control vulnerability
CVE-2024-51919
WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability
CVE-2024-56273
WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability
CVE-2024-56226
WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-11620
WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability
CVE-2024-50423
WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
CVE-2024-39619
WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability