← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-41665
WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
CVE-2023-41236
WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40680
WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40608
WordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability
CVE-2023-40555
WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection
CVE-2023-40333
WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40204
WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload
CVE-2023-39998
WordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability
CVE-2023-40004
Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins
CVE-2023-39999
WordPress < 6.3.2 is vulnerable to Broken Access Control