← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-39313
WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability
CVE-2023-39312
WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability
CVE-2023-39163
WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-39311
WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2023-39306
WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-39310
WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability
CVE-2023-39307
WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability
CVE-2023-39157
WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
CVE-2023-38399
WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-38400
WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)