← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-35049
WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
CVE-2023-35050
WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability
CVE-2023-34370
Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
CVE-2023-34030
WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)
CVE-2023-34012
WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-34004
WordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-34003
WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability
CVE-2023-34000
WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-33922
WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability
CVE-2023-33330
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection