← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-40333
WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40204
WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload
CVE-2023-39998
WordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability
CVE-2023-40004
Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins
CVE-2023-39993
WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability
CVE-2023-40000
WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability
CVE-2023-39922
WordPress Avada theme <= 7.11.1 - Authenticated Broken Access Control vulnerability
CVE-2023-39990
WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2023-39989
WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-39309
WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability