← All credits
Rafie Muhammad | Patchstack Bug Bounty Program
213 vulnerability records and advisories credit this contributor.
CVE-2026-93485
WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability
CVE-2026-27432
WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-84815
WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28175
WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66705
WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66707
WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66702
WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27433
WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerability
CVE-2026-57748
WordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2026-56068
WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability