← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-35918
WordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-35917
WordPress WooCommerce PayPal Payments Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35880
WordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35879
WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection
CVE-2023-35876
WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-35881
WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2023-35049
WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
CVE-2023-35050
WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability
CVE-2023-34370
Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
CVE-2023-34030
WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)