Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
537
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 461-480 of 537 Vulnerabilities

Featured Image from URL <= 4.8.2 - Missing Authorization
4.3
CVE-2024-37516
Jul 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Spectra <= 2.13.7 - Missing Authorization via generate_ai_content
4.3
CVE-2024-37517
Jul 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The Events Calendar <= 6.5.1.4 - Cross-Site Request Forgery via action_restore_events
4.3
CVE-2024-37518
Jul 5, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
4.3
CVE-2024-37934
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The Post Grid <= 7.7.4 - Missing Authorization via save_block_css
4.3
CVE-2024-37483
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The Post Grid <= 7.7.4 - Missing Authorization via AJAX
4.3
CVE-2024-37482
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Newspack Content Converter <= 0.1.5 - Missing Authorization
4.3
CVE-2024-37477
Jul 1, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Newspack Blocks <= 3.0.8 - Missing Authorization
4.3
CVE-2024-37425
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WP Job Manager - Resume Manager <= 2.1.0 - Missing Authorization
4.3
CVE-2024-37443
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
File Manager <= 7.2.7 - Missing Authorization
4.3
CVE-2024-37254
Jun 27, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal
4.3
CVE-2024-32111
Jun 24, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Job Manager - Resume Manager <= 2.1.0 - Cross-Site Request Forgery
4.3
CVE-2024-37241
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Newspack Newsletters <= 2.13.2 - Cross-Site Request Forgery
4.3
CVE-2024-37242
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Metform Elementor Contact Form Builder <= 3.8.3 - Missing Authorization to Notice Dismissal
4.3
CVE-2024-33570
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
XStore <= 9.3.8 - Missing Authorization
4.3
CVE-2024-33563
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WZone <= 14.0.10 - Missing Authorization
4.3
CVE-2024-33547
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Soledad <= 8.4.5 - Cross-Site Request Forgery
4.3
CVE-2024-31369
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Soledad <= 8.4.5 - Missing Authorization
4.3
CVE-2024-31367
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Easy Social Share Buttons <= 9.4 - Missing Authorization
4.3
CVE-2024-31307
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
4.3
CVE-2024-31099
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Featured Image from URL <= 4.8.2 - Missing Authorization CVE-2024-37516 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 5, 2024
Spectra <= 2.13.7 - Missing Authorization via generate_ai_content CVE-2024-37517 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 5, 2024
The Events Calendar <= 6.5.1.4 - Cross-Site Request Forgery via action_restore_events CVE-2024-37518 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N July 5, 2024
Ninja Forms <= 3.8.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-37934 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 4, 2024
The Post Grid <= 7.7.4 - Missing Authorization via save_block_css CVE-2024-37483 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 4, 2024
The Post Grid <= 7.7.4 - Missing Authorization via AJAX CVE-2024-37482 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 4, 2024
Newspack Content Converter <= 0.1.5 - Missing Authorization CVE-2024-37477 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 1, 2024
Newspack Blocks <= 3.0.8 - Missing Authorization CVE-2024-37425 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 28, 2024
WP Job Manager - Resume Manager <= 2.1.0 - Missing Authorization CVE-2024-37443 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 28, 2024
File Manager <= 7.2.7 - Missing Authorization CVE-2024-37254 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 27, 2024
WordPress Core < 6.5.5 - Authenticated (Contributor+) Directory Traversal CVE-2024-32111 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 24, 2024
WP Job Manager - Resume Manager <= 2.1.0 - Cross-Site Request Forgery CVE-2024-37241 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 21, 2024
Newspack Newsletters <= 2.13.2 - Cross-Site Request Forgery CVE-2024-37242 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N June 21, 2024
Metform Elementor Contact Form Builder <= 3.8.3 - Missing Authorization to Notice Dismissal CVE-2024-33570 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 25, 2024
XStore <= 9.3.8 - Missing Authorization CVE-2024-33563 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 25, 2024
WZone <= 14.0.10 - Missing Authorization CVE-2024-33547 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 25, 2024
Soledad <= 8.4.5 - Cross-Site Request Forgery CVE-2024-31369 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N April 9, 2024
Soledad <= 8.4.5 - Missing Authorization CVE-2024-31367 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 9, 2024
Easy Social Share Buttons <= 9.4 - Missing Authorization CVE-2024-31307 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 5, 2024
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization CVE-2024-31099 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N March 29, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation