Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
434
All Time Discoveries

Showing 361-380 of 434 Vulnerabilities

Sucuri Security <= 1.8.33 - Cross-Site Request Forgery
8.8
CVE-2022-29489
Sep 14, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery
8.8
CVE-2022-38093
Sep 5, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update
8.8
CVE-2022-29495
Jun 30, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection
9.1
CVE-2024-32602
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Stockholm <= 9.6 - Unauthenticated Local File Inclusion
9.8
CVE-2024-34551
May 7, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
XStore Core <= 5.3.5 - Unauthenticated PHP Object Injection
9.8
CVE-2024-33553
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
XStore Core <= 5.3.5 - Unauthenticated Privilege Escalation
9.8
CVE-2024-33552
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
OrderConvo <= 12.4 - Missing Authorization to Arbitrary File Upload
9.8
CVE-2024-33566
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
XStore <= 9.3.5 - Unauthenticated Local File Inclusion
9.8
CVE-2024-33560
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Unauthenticated Privilege Escalation
9.8
CVE-2024-33567
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection
9.8
CVE-2024-32600
Apr 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Mailster <= 4.0.6 - Unauthenticated Local File Inclusion
9.8
CVE-2024-32523
Apr 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion
9.8
CVE-2024-31231
Apr 3, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection
9.8
CVE-2024-30224
Mar 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Pie Register <= 3.8.3.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-27957
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion
9.8
CVE-2024-27971
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Automatic <= 3.92.0 - Unauthenticated SQL Injection
9.8
CVE-2024-27956
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Automatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
9.8
CVE-2024-27954
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
9.8
CVE-2023-51409
Jan 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
9.8
CVE-2023-52221
Jan 8, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Sucuri Security <= 1.8.33 - Cross-Site Request Forgery CVE-2022-29489 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H September 14, 2022
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery CVE-2022-38093 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H September 5, 2022
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update CVE-2022-29495 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H June 30, 2022
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection CVE-2024-32602 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 16, 2024
Stockholm <= 9.6 - Unauthenticated Local File Inclusion CVE-2024-34551 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 7, 2024
XStore Core <= 5.3.5 - Unauthenticated PHP Object Injection CVE-2024-33553 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2024
XStore Core <= 5.3.5 - Unauthenticated Privilege Escalation CVE-2024-33552 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2024
OrderConvo <= 12.4 - Missing Authorization to Arbitrary File Upload CVE-2024-33566 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2024
XStore <= 9.3.5 - Unauthenticated Local File Inclusion CVE-2024-33560 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2024
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Unauthenticated Privilege Escalation CVE-2024-33567 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2024
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection CVE-2024-32600 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 16, 2024
Mailster <= 4.0.6 - Unauthenticated Local File Inclusion CVE-2024-32523 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 15, 2024
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion CVE-2024-31231 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 3, 2024
WholesaleX – WooCommerce Wholesale Plugin (Wholesale Prices, Dynamic Pricing, Tiered Pricing) <= 1.3.2 - Unauthenticated PHP Object Injection CVE-2024-30224 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 26, 2024
Pie Register <= 3.8.3.1 - Unauthenticated Arbitrary File Upload CVE-2024-27957 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
Premmerce Permalink Manager for WooCommerce <= 2.3.10 - Unauthenticated Local File Inclusion CVE-2024-27971 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
Automatic <= 3.92.0 - Unauthenticated SQL Injection CVE-2024-27956 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
Automatic <= 3.92.0 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery CVE-2024-27954 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload CVE-2023-51409 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 9, 2024
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile CVE-2023-52221 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 8, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation