← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-36515
WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability
CVE-2023-35916
WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-35915
WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection
CVE-2023-35914
WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-35918
WordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-35917
WordPress WooCommerce PayPal Payments Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35880
WordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35879
WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection
CVE-2023-35876
WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-35881
WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability