Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
538
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 538 Vulnerabilities

ListingPro Plugin <= 2.9.3 - Unauthenticated SQL Injection
10.0
CVE-2024-38795
Jul 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
ListingPro <= 2.9.3 - Unauthenticated SQL Injection
10.0
CVE-2024-39622
Jul 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
XStore Core <= 5.3.8 - Unauthenticated SQL Injection
10.0
CVE-2024-33551
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection
10.0
CVE-2024-33544
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
XStore <= 9.3.8 - Unauthenticated SQL Injection
10.0
CVE-2024-33559
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
ListingPro Plugin <= 2.9.3 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-39620
Jul 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Newspack Blocks <= 3.0.8 - Authenticated (Contributor+) Arbitrary File Upload
9.9
CVE-2024-37424
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-37090
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-33546
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Upload
9.9
CVE-2024-33556
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Element Pack Pro <= 7.7.4 - Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization
9.9
CVE-2024-33568
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Element Pack Elementor Addons <= 5.5.3 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30496
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30489
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing
9.9
CVE-2023-33318
May 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager
9.9
CVE-2023-31090
May 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2024-43917
Aug 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion
9.8
CVE-2024-43328
Aug 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Indeed Membership Pro <= 12.6 - Unauthenticated Privilege Escalation
9.8
CVE-2024-43240
Aug 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Woffice <= 5.4.10 - Unauthenticated Privilege Escalation
9.8
CVE-2024-43153
Aug 7, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ListingPro Plugin <= 2.9.3 - Unauthenticated Local File Inclusion
9.8
CVE-2024-39619
Jul 22, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
ListingPro Plugin <= 2.9.3 - Unauthenticated SQL Injection CVE-2024-38795 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 22, 2024
ListingPro <= 2.9.3 - Unauthenticated SQL Injection CVE-2024-39622 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 22, 2024
XStore Core <= 5.3.8 - Unauthenticated SQL Injection CVE-2024-33551 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H April 25, 2024
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection CVE-2024-33544 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H April 25, 2024
XStore <= 9.3.8 - Unauthenticated SQL Injection CVE-2024-33559 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H April 25, 2024
ListingPro Plugin <= 2.9.3 - Authenticated (Subscriber+) SQL Injection CVE-2024-39620 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H July 22, 2024
Newspack Blocks <= 3.0.8 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-37424 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H June 28, 2024
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection CVE-2024-37090 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H June 20, 2024
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection CVE-2024-33546 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 25, 2024
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Upload CVE-2024-33556 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 25, 2024
Element Pack Pro <= 7.7.4 - Authenticated (Contributor+) Arbitrary File Read and PHAR Deserialization CVE-2024-33568 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 25, 2024
Element Pack Elementor Addons <= 5.5.3 - Authenticated (Contributor+) SQL Injection CVE-2024-30496 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection CVE-2024-30489 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing CVE-2023-33318 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H May 22, 2023
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager CVE-2023-31090 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H May 22, 2023
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection CVE-2024-43917 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 22, 2024
EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion CVE-2024-43328 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 16, 2024
Indeed Membership Pro <= 12.6 - Unauthenticated Privilege Escalation CVE-2024-43240 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 12, 2024
Woffice <= 5.4.10 - Unauthenticated Privilege Escalation CVE-2024-43153 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 7, 2024
ListingPro Plugin <= 2.9.3 - Unauthenticated Local File Inclusion CVE-2024-39619 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 22, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation