← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-68906
WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68905
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
CVE-2025-68904
WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68510
WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability
CVE-2025-53420
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53236
WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability
CVE-2025-53234
WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62016
WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability
CVE-2025-62012
WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62011
WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability