← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2025-26873
WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability
CVE-2025-26733
WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
CVE-2025-24753
WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability
CVE-2025-24751
WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability
CVE-2025-24739
WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24738
WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24648
WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2.1 - Privilege Escalation vulnerability
CVE-2025-24654
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Control vulnerability
CVE-2025-22800
WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability
CVE-2025-22700
WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability