← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-45607
WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45603
WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload
CVE-2023-45050
WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-44999
WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2023-45005
WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45001
WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection
CVE-2023-45000
WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability
CVE-2023-44151
WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2023-44148
WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability
CVE-2023-41957
WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability