← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2026-28130
WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25460
WordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2026-25459
WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
CVE-2026-25461
WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-67919
WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-67918
WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67917
WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
CVE-2025-67566
WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability
CVE-2025-64378
WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability
CVE-2025-64212
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability