← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-29100
WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability
CVE-2024-29092
WordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29090
WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-29091
WordPress WP Armour plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-28002
WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27999
WordPress Preview E-mails for WooCommerce plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-28004
WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability
CVE-2024-28001
WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-28003
WordPress Max Mega Menu plugin <= 3.3 - Broken Access Control vulnerability
CVE-2024-27955
WordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability