Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
434
All Time Discoveries

Showing 81-100 of 434 Vulnerabilities

WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
5.3
CVE-2023-51495
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2023-51503
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Beaver Builder – WordPress Page Builder <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.3
CVE-2023-50889
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
5.3
CVE-2023-48759
Nov 28, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
5.3
CVE-2023-48739
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
5.3
CVE-2023-44151
Sep 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
5.3
CVE-2023-40004
Aug 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization
5.3
CVE-2023-40608
Aug 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export
5.3
CVE-2023-38386
Jul 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure
5.3
CVE-2023-37868
Jul 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WooCommerce Box Office <= 1.1.51 - Missing Authorization
5.3
CVE-2023-34003
Jun 2, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
5.3
CVE-2023-28775
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WordPress Automatic Plugin <= 3.92.1 Cross-Site Request Forgery
5.4
CVE-2024-32693
Apr 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Essential Blocks for Gutenberg <= 4.2.0 - Incorrect Authorization Checks
5.4
CVE-2023-51359
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
5.4
CVE-2023-44999
Oct 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Themify Ultra <= 7.3.5 - Missing Authorization
5.4
CVE-2023-46146
Oct 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Themify Ultra <= 7.3.5 - Missing Authorization
5.4
CVE-2023-46148
Oct 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Elements kit Elementor addons <= 2.9.1 - Missing Authorization
5.4
CVE-2023-39993
Aug 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization
5.4
CVE-2023-36683
Jul 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
LearnPress <= 4.2.3 - Missing Authorization
5.4
CVE-2023-36516
Jul 4, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization CVE-2023-51495 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 27, 2023
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference CVE-2023-51503 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N December 27, 2023
Beaver Builder – WordPress Page Builder <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-50889 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N December 26, 2023
JetElements For Elementor <= 2.6.13 - Missing Authorization to Unauthenticated Arbitrary Attachment Download CVE-2023-48759 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N November 28, 2023
Porto Theme - Functionality <= 2.11.1 - Missing Authorization CVE-2023-48739 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 23, 2023
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update CVE-2023-44151 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N September 22, 2023
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update CVE-2023-40004 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 30, 2023
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization CVE-2023-40608 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 17, 2023
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export CVE-2023-38386 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 25, 2023
Premium Addons PRO <= 2.9.0 - Sensitive Information Exposure CVE-2023-37868 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 10, 2023
WooCommerce Box Office <= 1.1.51 - Missing Authorization CVE-2023-34003 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N June 2, 2023
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset CVE-2023-28775 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N May 9, 2023
WordPress Automatic Plugin <= 3.92.1 Cross-Site Request Forgery CVE-2024-32693 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N April 19, 2024
Essential Blocks for Gutenberg <= 4.2.0 - Incorrect Authorization Checks CVE-2023-51359 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N December 26, 2023
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery CVE-2023-44999 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L October 17, 2023
Themify Ultra <= 7.3.5 - Missing Authorization CVE-2023-46146 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L October 17, 2023
Themify Ultra <= 7.3.5 - Missing Authorization CVE-2023-46148 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L October 17, 2023
Elements kit Elementor addons <= 2.9.1 - Missing Authorization CVE-2023-39993 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N August 23, 2023
Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization CVE-2023-36683 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N July 27, 2023
LearnPress <= 4.2.3 - Missing Authorization CVE-2023-36516 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N July 4, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation