Wordfence Intelligence   >   Vulnerability Researchers   >   Rafie Muhammad

Rafie Muhammad

Organization: Patchstack

2
All Time Ranking
420
All Time Discoveries

Showing 41-60 of 420 Vulnerabilities

WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51475
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51473
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51412
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51419
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection
9.8
CVE-2023-49776
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-49815
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection
9.8
CVE-2023-49826
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
9.8
CVE-2023-49773
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
9.8
CVE-2023-49772
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
9.8
CVE-2023-49778
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Porto Theme - Functionality <= 2.11.1 - Unauthenticated SQL Injection
9.8
CVE-2023-48738
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
9.8
CVE-2023-39163
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
9.8
CVE-2023-38399
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion
9.8
CVE-2023-37888
Nov 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
9.8
CVE-2023-47507
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
9.8
CVE-2023-47178
Oct 31, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-45603
Oct 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
9.8
CVE-2023-40555
Sep 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JupiterX Core <= 3.3.8 - Unauthenticated Privilege Escalation
9.8
CVE-2023-38389
Aug 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-38388
Aug 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload CVE-2023-51475 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload CVE-2023-51473 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload CVE-2023-51412 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload CVE-2023-51419 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection CVE-2023-49776 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload CVE-2023-49815 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection CVE-2023-49826 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection CVE-2023-49773 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection CVE-2023-49772 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection CVE-2023-49778 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Porto Theme - Functionality <= 2.11.1 - Unauthenticated SQL Injection CVE-2023-48738 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 23, 2023
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion CVE-2023-39163 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 15, 2023
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion CVE-2023-38399 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 15, 2023
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion CVE-2023-37888 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 15, 2023
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection CVE-2023-47507 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 7, 2023
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion CVE-2023-47178 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 31, 2023
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload CVE-2023-45603 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 10, 2023
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection CVE-2023-40555 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 5, 2023
JupiterX Core <= 3.3.8 - Unauthenticated Privilege Escalation CVE-2023-38389 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 22, 2023
JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload CVE-2023-38388 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 22, 2023

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation