← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-39645
WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-39642
WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-39634
WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability
CVE-2024-39633
WordPress PowerPack for Beaver Builder plugin <= 2.33.0 - Contributor+ Privilege Escalation vulnerability
CVE-2024-39628
WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-38774
WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability
CVE-2024-38707
WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability
CVE-2024-37934
WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability
CVE-2024-37516
WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2024-37517
WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability