← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-33550
WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability
CVE-2024-33551
WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability
CVE-2024-33552
WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability
CVE-2024-33548
WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-33556
WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability
CVE-2024-33558
WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
CVE-2024-33560
WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability
CVE-2024-33561
WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
CVE-2024-33559
WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability
CVE-2024-33547
WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability