← All credits
Majed Refaea (Patchstack Alliance)
84 vulnerability records and advisories credit this contributor.
CVE-2024-43332
WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability
CVE-2024-43212
WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability
CVE-2024-39660
WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38776
WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability
CVE-2024-38746
WordPress MakeStories (for Google Web Stories) plugin <= 3.0.3 - Arbitrary File Download and SSRF vulnerability
CVE-2024-38752
WordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38758
WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability
CVE-2024-38730
WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability
CVE-2024-38733
WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability
CVE-2024-38695
WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability