← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2022-45836
WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-45084
WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-45079
WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-38074
WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
CVE-2023-39999
WordPress < 6.3.2 is vulnerable to Broken Access Control
CVE-2024-32532
WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability
CVE-2025-49406
WordPress Houzez Theme <= 4.1.1 - Broken Access Control Vulnerability
CVE-2025-49405
WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability
CVE-2025-49407
WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47584
WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability