← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2023-31080
WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability
CVE-2023-30777
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
CVE-2023-30500
WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-29100
WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-29101
WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-29099
WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-28994
WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-28782
WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection
CVE-2023-28787
WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability
CVE-2023-28780
WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)