Rafie Muhammad

Security Researcher at Patchstack

8 January, 2025

Critical Vulnerabilities Found in Fancy Product Designer Plugin

                arbitrary file upload            

                SQL Injection            

                ENVATO            

                Critical Vulnerability

23 December, 2024

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

                Critical Vulnerability            

                privilege escalation            

                arbitrary file upload            

                theme            

                SQL Injection            

                ENVATO

14 November, 2024

Critical Account Takeover Patched in Really Simple Security Plugin

                Critical Vulnerability            

                account takeover            

                Really Simple Security            

29 October, 2024

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

                privilege escalation            

                LiteSpeed Cache            

                zeroday            

17 October, 2024

Critical Vulnerabilities in Ultimate Membership Pro Plugin

                privilege escalation            

                php object injection            

12 September, 2024

SQL Injection Vulnerabilities Found in ListingPro Theme and Plugin

                ENVATO            

                Critical Vulnerability            

                SQL Injection            

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

5 September, 2024

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

                Critical Vulnerability            

                account takeover            

                LiteSpeed Cache            

21 August, 2024

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

                zeroday            

                Critical Vulnerability            

                privilege escalation            

                LiteSpeed Cache

3 July, 2024

Polyfill Vulnerability Effect on the WordPress Ecosystem

                supply chain attack            

                Polyfill            

wordpress 6-3-2 security update technical analysis by patchstack

1 July, 2024

WordPress Core 6.5.5 Security Update – Technical Advisory

                WordPress core            

                security release            

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                SQL Injection            

                arbitrary option update            

                WZone            

                ENVATO            

                privilege escalation

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                xss            

                Slider Revolution            

                Audit            

1 2 3 … 5 Next »

Rafie Muhammad

Critical Vulnerabilities Found in Fancy Product Designer Plugin

Multiple Critical Vulnerabilities Patched in WPLMS and VibeBP Plugins

Critical Account Takeover Patched in Really Simple Security Plugin

Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin

Critical Vulnerabilities in Ultimate Membership Pro Plugin

SQL Injection Vulnerabilities Found in ListingPro Theme and Plugin

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

Polyfill Vulnerability Effect on the WordPress Ecosystem

WordPress Core 6.5.5 Security Update – Technical Advisory

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials