GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Muhammad Daffa | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2024-54252
WordPress Pinpoint Booking System Plugin <= 2.9.9.5.7 - Broken Access Control vulnerability
CVE-2024-49312
WordPress Edwiser Bridge plugin <= 3.0.7 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-49311
WordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49302
WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49304
WordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-44064
WordPress Like Button Rating LikeBtn plugin <= 2.6.53 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-43973
WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability
CVE-2024-43933
WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability