← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-38774
WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability
CVE-2024-38707
WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability
CVE-2024-37934
WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability
CVE-2024-37516
WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2024-37517
WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability
CVE-2024-37477
WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability
CVE-2024-37476
WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37492
WordPress Gutenberg plugin <= 18.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37475
WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability
CVE-2024-37474
WordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerability