← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-51503
WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-51501
WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51481
WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability
CVE-2023-51500
WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability
CVE-2023-51502
WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-51483
WordPress WP Frontend Profile plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability
CVE-2023-51499
WordPress WooCommerce Shipping Per Product plugin <= 2.5.4 - Broken Access Control vulnerability
CVE-2023-51497
WordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability
CVE-2023-51488
WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51494
WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability