← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-37477
WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability
CVE-2024-37476
WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37492
WordPress Gutenberg plugin <= 18.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37475
WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability
CVE-2024-37474
WordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37470
WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability
CVE-2024-37471
WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37443
WordPress WP Job Manager plugin <= 2.1.0 - Broken Access Control vulnerability
CVE-2024-37424
WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability
CVE-2024-37425
WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability