← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-37470
WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability
CVE-2024-37471
WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37443
WordPress WP Job Manager plugin <= 2.1.0 - Broken Access Control vulnerability
CVE-2024-37424
WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability
CVE-2024-37425
WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability
CVE-2024-37423
WordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability
CVE-2024-37277
WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-37276
WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability
CVE-2024-37268
WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability
CVE-2024-37269
WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability