← All credits
Majed Refaea (Patchstack Alliance)
84 vulnerability records and advisories credit this contributor.
CVE-2024-31372
WordPress No-Bot Registration plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31379
WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31299
WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability
CVE-2024-31301
WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31305
WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31285
WordPress WordPress Tooltips plugin <= 9.5.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31288
WordPress RapidLoad plugin <= 2.2.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-31287
WordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability
CVE-2024-31284
WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability
CVE-2024-31283
WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability