Rafie Muhammad

Say thanks

1,858.59

XP

45

Reports

13

Reports, last 90 days

#2

26 Oct, 2026
🇮🇩
Lvl 5
0
1
1
1
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
KALLYAS<= 4.25.0
Cross Site Scripting (XSS)
48.99
7.1
26/08/2026
The Grid<= 2.8.1
Remote Code Execution (RCE)
45
10
02/09/2026
Green Popups< 7.6.3
SQL Injection
18.6
9.3
04/09/2026
Houzez<= 4.4.0
Cross Site Scripting (XSS)
7.1
7.1
01/09/2026
MLS On The Fly<= 1.8.1.5
SQL Injection
17
8.5
06/09/2026
Jannah<= 7.6.5
Cross Site Scripting (XSS)
14.2
7.1
01/09/2026
Qode Tours<= 3.1.3.2
SQL Injection
8.5
8.5
06/09/2026
Traveler<= 3.2.9
SQL Injection
18.6
9.3
04/09/2026
MainWP Child<= 6.2.1
Deserialization of untrusted data
121.44
8.8
03/09/2026
Qode Music<= 2.1.8.2
Cross Site Scripting (XSS)
N/A
7.1
01/09/2026
Qode Real Estate<= 1.1.7.3
Cross Site Scripting (XSS)
N/A
7.1
01/09/2026
ARMember Premium<= 7.9.0
SQL Injection
18.6
9.3
04/09/2026
UDesign Core<= 4.15.0
SQL Injection
12.75
8.5
05/09/2026
ListingPro<= 2.9.12
SQL Injection
8.5
8.5
05/09/2026
Porto Theme - Functionality<= 3.9.3
SQL Injection
74.4
9.3
05/09/2026
Betheme<= 28.5.8
Cross Site Scripting (XSS)
28.4
7.1
01/09/2026
UpSolution Core<= 8.44
Cross Site Scripting (XSS)
21.3
7.1
01/09/2026
Ajax Search Pro<= 4.29.1
SQL Injection
18.6
9.3
04/09/2026
tagDiv Opt-In Builder<= 1.7.6
SQL Injection
27.9
9.3
04/09/2026
tagDiv Opt-In Builder<= 1.7.6
SQL Injection
12.75
8.5
04/09/2026
JNews - Pay Writer<= 12.0.1
SQL Injection
N/A
9.3
04/09/2026
WPLMS <= 4.973
SQL Injection
34
8.5
06/09/2026
WPLMS< 1.9.9.8.2
SQL Injection
74.4
9.3
05/09/2026
UpSolution Core<= 9.3
SQL Injection
102
8.5
05/09/2026
LayerSlider<= 8.4.0
Cross Site Scripting (XSS)
35.5
7.1
01/09/2026
WordPress<= 7.1
Cross Site Scripting (XSS)
142
7.1
15/09/2026
WP Rentals< 3.16.0
Insecure Direct Object References (IDOR)
12.42
5.4
15/10/2025
Enfold<= 8.0
Cross Site Scripting (XSS)
66.7
5.8
26/08/2026
Visitors Traffic Real Time Statistics<= 8.11
Cross Site Scripting (XSS)
28.4
7.1
30/06/2026
Facebook for WordPress<= 5.2.1
Cross Site Scripting (XSS)
85.2
7.1
03/07/2026
Facebook for WooCommerce<= 3.7.5
Cross Site Scripting (XSS)
85.2
7.1
03/07/2026
Rank Math SEO<= 1.0.274.1
Cross Site Scripting (XSS)
127.8
7.1
10/07/2026
Shopify<= 1.0.0
Local File Inclusion
N/A
7.5
15/10/2025
Motors< 5.6.85
Broken Access Control
13
6.5
15/10/2025
JetEngine<= 3.8.10.2
SQL Injection
213.9
9.3
17/06/2026
MasterStudy LMS Pro< 4.7.16
Broken Access Control
13
6.5
12/09/2025
Ave Core<= 2.9.1
Broken Access Control
6.3
6.3
19/12/2025
Listeo Core<= 2.0.21
Cross Site Scripting (XSS)
16.33
7.1
19/12/2025
pixfort Core<= 3.2.22
Broken Access Control
14.49
6.3
12/09/2025
pixfort Core<= 3.2.22
Cross Site Scripting (XSS)
32.66
7.1
12/09/2025
ListingPro<= 2.9.8
Cross Site Scripting (XSS)
32.66
7.1
15/08/2025
RH Frontend Publishing Pro< 4.3.4
Cross Site Scripting (XSS)
28.4
7.1
13/08/2025
UDesign<= 4.14.0
Cross Site Scripting (XSS)
170.4
7.1
07/08/2025
Sober<= 3.5.12
Broken Access Control
4.3
4.3
19/12/2025
JNews - Video<= 11.0.2
Cross Site Scripting (XSS)
28.4
7.1
12/09/2025
JNews - Pay Writer<= 11.0.0
Local File Inclusion
30
7.5
12/09/2025
JNews - Frontend Submit<= 11.0.0
Cross Site Scripting (XSS)
28.4
7.1
12/09/2025
Oshine< 7.3.0
Local File Inclusion
64.8
8.1
13/08/2025
REHub Framework<= 19.9.5
Broken Access Control
30
7.5
13/08/2025
Woffice Core<= 5.4.30
Insecure Direct Object References (IDOR)
13
6.5
15/10/2025
Woffice<= 5.4.30
Cross Site Scripting (XSS)
32.66
7.1
15/10/2025
Photography< 7.7.5
Local File Inclusion
74.52
8.1
15/10/2025
Traveler<= 3.2.6
Broken Access Control
14.95
6.5
15/10/2025
Woffice Core<= 5.4.30
Broken Access Control
10.6
5.3
15/10/2025
KALLYAS<= 4.22.0
Broken Access Control
95.4
5.3
07/08/2025
KALLYAS<= 4.22.0
Broken Access Control
36.45
5.4
07/08/2025
MasterStudy LMS Pro< 4.7.16
Arbitrary Content Deletion
15
7.5
12/09/2025
MasterStudy LMS Pro< 4.7.16
Sensitive Data Exposure
7.5
7.5
12/09/2025
MasterStudy LMS Pro< 4.7.16
Broken Access Control
5.4
5.4
12/09/2025
Masterstudy Elementor Widgets<= 1.2.4
Broken Access Control
10.6
5.3
12/09/2025
Masterstudy Elementor Widgets<= 1.2.4
Broken Access Control
5.4
5.4
12/09/2025
Masterstudy< 4.8.122
Broken Access Control
15
7.5
12/09/2025
ListingPro<= 2.9.8
Broken Access Control
10.8
5.4
15/08/2025
XStore< 9.6
Content Injection
31.8
5.3
11/08/2025
TheGem<= 5.10.5
Broken Access Control
16.2
5.4
04/08/2025
TheGem (Elementor)<= 5.10.5
Broken Access Control
16.2
5.4
04/08/2025
Houzez Theme - Functionality<= 4.1.2
Broken Access Control
22.8
7.6
11/08/2025
Houzez Theme - Functionality<= 4.1.2
Arbitrary File Download
58.5
6.5
11/08/2025
Oshine Core<= 1.5.5
Broken Access Control
10.8
5.4
13/08/2025
ListingPro Reviews< 2.9.11
Broken Access Control
10.8
5.4
15/08/2025
WPLMS <= 4.970
Broken Access Control
8.6
4.3
15/08/2025
WPLMS<= 1.9.9.8
Cross Site Scripting (XSS)
28.4
7.1
15/08/2025
WPLMS<= 1.9.9.7
Broken Access Control
30
7.5
15/08/2025
ListingPro< 2.9.10
Cross Site Scripting (XSS)
28.4
7.1
13/08/2025
ListingPro< 2.9.10
Local File Inclusion
64.8
8.1
13/08/2025
ListingPro< 2.9.10
Broken Access Control
14.2
7.1
13/08/2025
XStore< 9.6.1
Local File Inclusion
135
7.5
11/08/2025
XStore< 9.6
Broken Access Control
56.7
6.3
11/08/2025
XStore< 9.6.1
Cross Site Scripting (XSS)
127.8
7.1
11/08/2025
UDesign Core<= 4.14.0
Broken Access Control
18.9
6.3
07/08/2025
UDesign Core<= 4.14.0
Cross Site Scripting (XSS)
42.6
7.1
07/08/2025
KALLYAS<= 4.22.0
Arbitrary File Upload
200.48
9.9
07/08/2025
TheGem (Elementor)<= 5.10.5
Cross Site Scripting (XSS)
19.5
6.5
04/08/2025
TheGem<= 5.10.5
Cross Site Scripting (XSS)
19.5
6.5
04/08/2025
Houzez<= 4.1.1
Cross Site Scripting (XSS)
42.6
7.1
07/08/2025
Houzez<= 4.1.1
Local File Inclusion
97.2
8.1
07/08/2025
Houzez CRM<= 1.4.7
Broken Access Control
19.5
6.5
11/08/2025
Uncode< 2.9.4.4
Cross Site Scripting (XSS)
56.8
7.1
04/08/2025
Houzez<= 4.1.1
Broken Access Control
31.8
5.3
07/08/2025
LoginWP - Pro<= 4.0.8.5
Settings Change
15
7.5
13/12/2024
The Plus Addons for Elementor Pro< 6.3.7
Broken Access Control
6.5
6.5
13/12/2024
LoginWP - Pro<= 4.0.8.5
Broken Access Control
13
6.5
13/12/2024
Mollie Payments for WooCommerce<= 8.0.2
Insecure Direct Object References (IDOR)
52
6.5
17/07/2024
WP VR<= 8.5.26
Arbitrary File Upload
25.62
9.9
25/04/2025
Photography<= 7.7.2
PHP Object Injection
36
9
20/05/2024
PayU India< 3.8.8
Broken Authentication
58.8
9.8
06/05/2025
Password Policy Manager<= 2.0.4
Broken Authentication
26.4
8.8
25/04/2025
Motors - Events<= 1.4.7
Local File Inclusion
54
9
07/05/2024
Advanced Database Cleaner PRO<= 3.2.10
Path Traversal
6.4
6.4
13/12/2024
Photography<= 7.7.2
PHP Object Injection
17
8.5
20/05/2024

Report vulnerabilities to earn bounties and rewards!

Read more