← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-41956
WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability
CVE-2023-41955
WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability
CVE-2023-41872
WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41804
WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-41805
Broken Access Control vulnerability in multiple Brainstorm Force plugins
CVE-2023-41665
WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
CVE-2023-41236
WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40680
WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40608
WordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability
CVE-2023-40555
WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection