Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
538
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 421-440 of 538 Vulnerabilities

Soledad <= 8.4.5 - Missing Authorization
5.3
CVE-2024-31368
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ActivityPub <= 1.0.5 - Missing Authorization
5.3
CVE-2023-52199
Jan 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WP Job Manager <= 2.0.0 - Missing Authorization
5.3
CVE-2023-52211
Jan 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooCommerce Product Vendors <= 2.2.2 - Missing Authorization
5.3
CVE-2023-52186
Dec 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
MC4WP <= 4.9.9 - Missing Authorization via listen
5.3
CVE-2023-51682
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WooCommerce Product Vendors <= 2.2.1 - Missing Authorization
5.3
CVE-2023-51494
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
5.3
CVE-2023-51498
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
5.3
CVE-2023-51496
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
5.3
CVE-2023-51495
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2023-51503
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Beaver Builder – WordPress Page Builder <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.3
CVE-2023-50889
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
5.3
CVE-2023-48759
Nov 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
5.3
CVE-2023-48739
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
5.3
CVE-2023-44151
Sep 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
5.3
CVE-2023-40004
Aug 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization
5.3
CVE-2023-40608
Aug 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export
5.3
CVE-2023-38386
Jul 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure
5.3
CVE-2023-37868
Jul 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WooCommerce Box Office <= 1.1.51 - Missing Authorization
5.3
CVE-2023-34003
Jun 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
5.3
CVE-2023-28775
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Soledad <= 8.4.5 - Missing Authorization CVE-2024-31368 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N April 9, 2024
ActivityPub <= 1.0.5 - Missing Authorization CVE-2023-52199 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 5, 2024
WP Job Manager <= 2.0.0 - Missing Authorization CVE-2023-52211 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 5, 2024
WooCommerce Product Vendors <= 2.2.2 - Missing Authorization CVE-2023-52186 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 29, 2023
MC4WP <= 4.9.9 - Missing Authorization via listen CVE-2023-51682 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 27, 2023
WooCommerce Product Vendors <= 2.2.1 - Missing Authorization CVE-2023-51494 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization CVE-2023-51498 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization CVE-2023-51496 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization CVE-2023-51495 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference CVE-2023-51503 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 27, 2023
Beaver Builder – WordPress Page Builder <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-50889 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 26, 2023
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download CVE-2023-48759 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N November 28, 2023
Porto Theme - Functionality <= 2.11.1 - Missing Authorization CVE-2023-48739 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 23, 2023
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update CVE-2023-44151 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 22, 2023
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update CVE-2023-40004 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 30, 2023
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization CVE-2023-40608 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 17, 2023
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export CVE-2023-38386 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 25, 2023
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure CVE-2023-37868 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 10, 2023
WooCommerce Box Office <= 1.1.51 - Missing Authorization CVE-2023-34003 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 2, 2023
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset CVE-2023-28775 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N May 9, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation