Wordfence Intelligence   >   Vulnerability Researchers   >   Mohammed Abd Alrahman

Mohammed Abd Alrahman

Organization: Wilaia Shield Team

474
All Time Ranking
9
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

About

Security Researcher from Tikrit, Salah al-Din, Iraq specializing in WordPress and web application security. Experienced in vulnerability discovery and responsible disclosure. Full-Stack Engineer. Ranked 4th in Iraq - CyberTalents CTF 2020

9 Vulnerabilities

The Events Calendar < 6.17.3.1 - Authenticated (Contributor+) Information Exposure
4.3
CVE-2026-84745
Sep 5, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2026-19723
Sep 3, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Authenticated (Author+) Information Exposure
4.3
CVE-2026-77785
Sep 2, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization
4.3
CVE-2026-77787
Sep 2, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-19719
Sep 2, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization
2.7
CVE-2026-77786
Aug 29, 2026
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Kirki – Freeform Page Builder, Website Builder & Customizer < 6.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
CVE-2026-74992
Aug 21, 2026
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Admin and Site Enhancements (ASE) < 9.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2026-19615
Aug 21, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
6.4
CVE-2026-19075
Aug 7, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
The Events Calendar < 6.17.3.1 - Authenticated (Contributor+) Information Exposure CVE-2026-84745 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N September 5, 2026
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected Cross-Site Scripting CVE-2026-19723 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N September 3, 2026
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Authenticated (Author+) Information Exposure CVE-2026-77785 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N September 2, 2026
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization CVE-2026-77787 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N September 2, 2026
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-19719 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N September 2, 2026
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization CVE-2026-77786 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N August 29, 2026
Kirki – Freeform Page Builder, Website Builder & Customizer < 6.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2026-74992 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N August 21, 2026
Admin and Site Enhancements (ASE) < 9.0.1 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2026-19615 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 21, 2026
All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery CVE-2026-19075 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 7, 2026

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation