← All credits
Rafie Muhammad (Patchstack)
502 vulnerability records and advisories credit this contributor.
CVE-2024-37091
WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability
CVE-2024-37090
SQL Injection vulnerability in multiple StylemixThemes premium themes
CVE-2024-37089
WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability
CVE-2024-37092
WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Local File Inclusion vulnerability
CVE-2024-35697
WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-35685
WordPress Radcliffe 2 theme <= 2.0.17 - Broken Access Control vulnerability
CVE-2024-35686
WordPress Sensei LMS plugin <= 4.23.1 - Broken Access Control vulnerability
CVE-2024-35677
WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability
CVE-2024-35668
WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-34765
WordPress Sensei Pro (WC Paid Courses) plugin <= 4.23.1.1.23.1 - Cross Site Scripting (XSS) vulnerability