Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

3
All Time Ranking
603
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 603 Vulnerabilities

Brizy Pro <= 2.6.1 - Reflected Cross-Site Scripting
6.1
CVE-2025-22763
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode()
4.3
CVE-2025-22800
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
6.4
CVE-2024-56275
Jan 3, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-51919
Jan 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
7.5
CVE-2024-51818
Jan 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization
5.3
CVE-2024-56273
Jan 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Contact Form by WPForms <= 1.9.2.2 - Missing Authorization
4.3
CVE-2024-56276
Jan 3, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
6.5
CVE-2024-56212
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Download Manager <= 3.3.03 - Missing Authorization
4.3
CVE-2024-56217
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
4.3
CVE-2024-56225
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting
6.1
CVE-2024-56226
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Royal Elementor Addons <= 1.7.1001 - Missing Authorization
4.3
CVE-2024-56227
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Widget Options <= 4.0.6.1 - Missing Authorization
4.3
CVE-2024-56219
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Kleo < 5.4.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-56209
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
6.1
CVE-2024-56210
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Userpro <= 5.1.9 - Missing Authorization
4.3
CVE-2024-56211
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
9.8
CVE-2024-56214
Dec 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2024-56050
Dec 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File Upload
8.8
CVE-2024-56052
Dec 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code Execution
8.8
CVE-2024-56051
Dec 17, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Brizy Pro <= 2.6.1 - Reflected Cross-Site Scripting CVE-2025-22763 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 14, 2025
Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode() CVE-2025-22800 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 7, 2025
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery CVE-2024-56275 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 3, 2025
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload CVE-2024-51919 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 3, 2025
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection CVE-2024-51818 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 3, 2025
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization CVE-2024-56273 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 3, 2025
Contact Form by WPForms <= 1.9.2.2 - Missing Authorization CVE-2024-56276 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N January 3, 2025
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection CVE-2024-56212 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N December 19, 2024
Download Manager <= 3.3.03 - Missing Authorization CVE-2024-56217 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N December 19, 2024
Premium Addons for Elementor <= 4.10.56 - Missing Authorization CVE-2024-56225 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 19, 2024
Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting CVE-2024-56226 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024
Royal Elementor Addons <= 1.7.1001 - Missing Authorization CVE-2024-56227 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 19, 2024
Widget Options <= 4.0.6.1 - Missing Authorization CVE-2024-56219 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 19, 2024
Kleo < 5.4.4 - Reflected Cross-Site Scripting CVE-2024-56209 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024
Userpro <= 5.1.9 - Reflected Cross-Site Scripting CVE-2024-56210 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N December 19, 2024
Userpro <= 5.1.9 - Missing Authorization CVE-2024-56211 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N December 19, 2024
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion CVE-2024-56214 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 19, 2024
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-56050 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 17, 2024
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File Upload CVE-2024-56052 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 17, 2024
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code Execution CVE-2024-56051 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 17, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation