Rafie Muhammad

20222023202420252026

Critical

High

Medium

Low

Global Rank

#5

of 3,203 researchers

Vulns

730

Critical98

High161

Medium469

Low2

Affected Assets

1,172

1,072plugins99themes1core

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

730 records


2026-07-21 15:42	WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action WP Foodbakery <= 4.9	`CVE-2026-15802`	8.1 High	Rafie Muhammad	No
2026-07-07 16:30	Eventer <= 4.4.2 - Unauthenticated SQL Injection via 'code' Parameter Eventer <= 4.4.2	`CVE-2026-9700`	7.5 High	Rafie Muhammad	No
2026-07-07 16:30	Eventer <= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation Eventer <= 4.4.2	`CVE-2026-9701`	9.8 Critical	Rafie Muhammad	No
2026-07-02 00:00	Shopify <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion Shopify <= 1.0.0	`CVE-2026-57748`	7.5 High	Rafie Muhammad	No
2026-06-30 00:00	Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.80 - Missing Authorization Motors - Car Dealer <= 5.6.80	`CVE-2026-27433`	5.3 Medium	Rafie Muhammad	No
2026-06-25 00:00	JetEngine <= 3.8.10.2 - Unauthenticated SQL Injection JetEngine <= 3.8.10.2	`CVE-2026-56068`	7.5 High	Rafie Muhammad	Yes
2026-06-03 11:45	MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter MasterStudy LMS Pro <= 4.8.20	`CVE-2026-8653`	6.5 Medium	Rafie Muhammad	Yes
2026-05-19 06:24	Kirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP Kirki <= 6.0.6	`CVE-2026-8073`	7.5 High	Rafie Muhammad	Yes
2026-05-12 21:06	Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter Avada (Fusion) Builder <= 3.15.1	`CVE-2026-4798`	7.5 High	Rafie Muhammad	Yes
2026-05-12 21:06	Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter Avada (Fusion) Builder <= 3.15.2	`CVE-2026-4782`	6.5 Medium	Rafie Muhammad	Yes

Showing 1–10 of 730 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C