← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-28994
WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-28782
WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection
CVE-2023-28787
WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability
CVE-2023-28780
WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-28785
WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-28777
WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
CVE-2023-28775
WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability
CVE-2023-28172
WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-27459
WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
CVE-2023-26526
WordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerability