Rafie Muhammad, Author at Patchstack

Thrive Theme : Dismiss Tooltip to Privilege Escalation

29 November, 2023

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

                thrive            

                theme            

                privilege escalation            

Authenticated Stored XSS vulnerability in WooCommerce and Jetpack Plugin

15 November, 2023

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

                xss            

                woocommerce            

                jetpack            

8 November, 2023

Arbitrary Attachment Render to XSS in Elementor Plugin

                Elementor            

                xss            

wordpress 6-3-2 security update technical analysis by patchstack

13 October, 2023

WordPress Core 6.3.2 Security Update – Technical Advisory

                WordPress core            

                security release            

12 October, 2023

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

                Critical Vulnerability            

                arbitrary file upload            

                unauthenticated            

Two Path to Privilege Escalation Bugs Found In the Simple Membership Plugin

27 September, 2023

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

                simple membership            

                privilege escalation            

Authenticated Privilege Escalation in Essential Addons for Elementor Plugin

15 September, 2023

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

                Essential Addons for Elementor            

                privilege escalation            

6 September, 2023

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

                php object injection            

                flatsome            

31 August, 2023

Critical Arbitrary File Upload Patched in Forminator Plugin

                Critical Vulnerability            

                arbitrary file upload            

                forminator            

30 August, 2023

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

                access token            

                all-in-one wp migration            

jupiter x core vulnerability patched - patchstack social - rafie mohammad

24 August, 2023

Critical Vulnerabilities Patched in Jupiter X Core Plugin

                Jupiter X            

                Critical Vulnerability            

                arbitrary file upload            

                account takeover

10 August, 2023

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

3 August, 2023

Authenticated RCE in JetElements For Elementor Plugin

                Critical Vulnerability            

                Elementor            

                rce            

                jetelements

27 July, 2023

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

                ninja forms            

                xss            

                broken access control            

18 July, 2023

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

                freemius            

                supply chain attack            

                xss            

14 July, 2023

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

                Critical Vulnerability            

                privilege escalation            

13 June, 2023

Critical Privilege Escalation in Essential Addons for Elementor Plugin Affecting 1+ Million Sites

Security Advisory

What Is An Open-Source Fork And How To Secure it?

5 May, 2023

Reflected XSS in Advanced Custom Fields Plugins Affecting 2+ Million Sites

Security Advisory

18 April, 2023

Critical Unauthenticated SQL Injection in Quiz And Survey Master

Security Advisory

Authenticated PHP Object Injection in User Registration Plugin

24 March, 2023

User Registration Plugin Vulnerability

Security Advisory

1 March, 2023

Security Vulnerability In OceanWP Theme

Security Advisory

21 February, 2023

Multiple Vulnerabilities In Shortcodes Ultimate Plugin Versions

Security Advisory

14 February, 2023

Vulnerability In Rank Math SEO Plugin

Security Advisory

2 February, 2023

Multiple Vulnerabilities Fixed In WP Statistics Plugin Version

Security Advisory

Multiple vulnerabilities found in LearnPress

24 January, 2023

Multiple Critical Vulnerabilities Fixed In LearnPress Plugin Version

Security Advisory

Rafie Muhammad

Thrive Theme Vulnerability: Dismiss Tooltip to Privilege Escalation

Authenticated Stored XSS in WooCommerce and Jetpack Plugin

Arbitrary Attachment Render to XSS in Elementor Plugin

WordPress Core 6.3.2 Security Update – Technical Advisory

Pre-Auth Arbitrary File Upload in User Submitted Posts Plugin

Two Paths to Privilege Escalation Vulnerability In The Simple Membership Plugin

Authenticated Privilege Escalation Vulnerability in Essential Addons for Elementor

Unauthenticated PHP Object Injection in Flatsome Theme <= 3.17.5

Critical Arbitrary File Upload Patched in Forminator Plugin

Pre-Auth Access Token Manipulation in All-in-One WP Migration Extensions

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Multiple High and Critical Vulnerabilities in Avada Theme and Plugin

Authenticated RCE in JetElements For Elementor Plugin

Multiple High Severity Vulnerabilities in Ninja Forms Plugin

Site-Wide Reflected XSS in Freemius WordPress SDK Affecting Millions of Sites

Critical Privilege Escalation in HT Mega Plugin Affecting 100k+ Sites

Unauthenticated IDOR to PII Disclosure in WooCommerce Stripe Gateway Plugin

Unauthenticated PHP Object Injection in Gravity Forms Plugin

CSRF to wp-admin Site Wide XSS in UpdraftPlus Plugin

WordPress Core 6.2.1 Security Update – Technical Advisory

Critical Privilege Escalation in Essential Addons for Elementor Plugin Affecting 1+ Million Sites

Reflected XSS in Advanced Custom Fields Plugins Affecting 2+ Million Sites

Critical Unauthenticated SQL Injection in Quiz And Survey Master

User Registration Plugin Vulnerability

Security Vulnerability In OceanWP Theme

Multiple Vulnerabilities In Shortcodes Ultimate Plugin Versions

Vulnerability In Rank Math SEO Plugin

Multiple Vulnerabilities Fixed In WP Statistics Plugin Version

Multiple Critical Vulnerabilities Fixed In LearnPress Plugin Version

All solutions

WordPress security

Patchstack

Social