Rafie Muhammad

Lead Security Researcher at Patchstack

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

5 September, 2024

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

                Critical Vulnerability            

                account takeover            

                LiteSpeed Cache            

21 August, 2024

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

                zeroday            

                Critical Vulnerability            

                privilege escalation            

                LiteSpeed Cache

3 July, 2024

Polyfill Vulnerability Effect on the WordPress Ecosystem

                supply chain attack            

                Polyfill            

wordpress 6-3-2 security update technical analysis by patchstack

1 July, 2024

WordPress Core 6.5.5 Security Update - Technical Advisory

                WordPress core            

                security release            

6 June, 2024

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

                privilege escalation            

                SQL Injection            

                arbitrary option update            

                WZone            

                ENVATO

28 May, 2024

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

                xss            

                Slider Revolution            

                Audit            

22 May, 2024

Critical Vulnerability Patched in UserPro Plugin

                account takeover            

                UserPro            

                Critical Vulnerability            

                privilege escalation

14 May, 2024

Critical Vulnerabilities Found in XStore Theme and Plugin

                Critical Vulnerability            

                account takeover            

                php object injection            

                SQL Injection            

                arbitrary option update            

                XStore

7 May, 2024

High Priority Vulnerabilities Patched in Uncode Core Plugin

                privilege escalation            

                Uncode            

                arbitrary file deletion            

                plugin

3 April, 2024

Critical Vulnerabilities Patched in REHub Theme and Plugin

                Critical Vulnerability            

                SQL Injection            

                REHub            

                Local File Inclusion

19 March, 2024

Critical Vulnerabilities Patched in WordPress Automatic Plugin

                SQL Injection            

                Automatic            

                Arbitrary File Download            

                Critical Vulnerability            

                ssrf

12 March, 2024

Critical Vulnerability Found in GOTMLS Plugin

                Critical Vulnerability            

                rce            

« Previous 1 2 3 4 5 Next »

Rafie Muhammad

Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin

Critical Privilege Escalation in LiteSpeed Cache Plugin Affecting 5+ Million Sites

Polyfill Vulnerability Effect on the WordPress Ecosystem

WordPress Core 6.5.5 Security Update - Technical Advisory

Multiple Vulnerabilities in WooCommerce Amazon Affiliates Plugin

Unauthenticated XSS Vulnerability Patched in Slider Revolution Plugin

Critical Vulnerability Patched in UserPro Plugin

Critical Vulnerabilities Found in XStore Theme and Plugin

High Priority Vulnerabilities Patched in Uncode Core Plugin

Critical Vulnerabilities Patched in REHub Theme and Plugin

Critical Vulnerabilities Patched in WordPress Automatic Plugin

Critical Vulnerability Found in GOTMLS Plugin

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials

Website security

For plugin devs

For researchers

Resources

Patchstack

Socials