← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2024-33570
WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability
CVE-2024-23500
WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-30229
WordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability
CVE-2024-25599
WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29792
WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29777
WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46434
WordPress The Plus Addons for Elementor Pro plugin < 6.3.7 - Broken Access Control vulnerability
CVE-2025-26976
WordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability
CVE-2025-26966
WordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability
CVE-2024-56000
WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability