← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-33553
WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability
CVE-2024-33555
WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
CVE-2024-33554
WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-33549
WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability
CVE-2024-33557
WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability
CVE-2024-33546
WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability
CVE-2024-33545
WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability
CVE-2024-33544
WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability
CVE-2024-32693
WordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-32600
WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability