← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-26966
WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability
CVE-2024-56000
WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability
CVE-2024-49321
WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability
CVE-2024-49248
WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-43234
WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability
CVE-2024-43242
WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability
CVE-2023-51360
WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability
CVE-2023-51359
WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability
CVE-2023-48739
WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerability
CVE-2023-48758
WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability