← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-39306
WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-39310
WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability
CVE-2023-39307
WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability
CVE-2023-39157
WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
CVE-2023-38399
WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability
CVE-2023-38400
WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-38388
WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
CVE-2023-38389
WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
CVE-2023-38386
WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability
CVE-2023-38393
WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability