Skip to content
Noroxi

Muhammad Daffa (Patchstack Alliance)

124 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Muhammad Daffa (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2022-46796
    26Monitor

    WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    villatheme · curcyDec 13, 2024

  • CVE-2022-46795
    26Monitor

    WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    tychesoftwares · print invoice \& delivery notes for woocommerceDec 13, 2024

  • CVE-2023-23823
    17Monitor

    WordPress Enhanced Text Widget plugin <= 1.5.8 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    clever widgets · enhanced text widgetDec 9, 2024

  • CVE-2024-43310
    35Monitor

    WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ukrsolution · print labels with barcodesNov 1, 2024

  • CVE-2024-43984
    35Monitor

    WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    podlove · podlove podcast publisherOct 31, 2024

  • CVE-2024-43997
    28Monitor

    WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scrip

    HighCVSS 7.1No exploitEPSS 0%

    easy.jobs · easyjobsOct 17, 2024

  • CVE-2024-43983
    21Monitor

    WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    podlove · podlove podcast publisherSep 17, 2024

  • CVE-2024-43309
    21Monitor

    WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpsocio · wp telegram widget and join linkAug 18, 2024

  • CVE-2024-5059
    30Monitor

    WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    awplife · event monsterJun 21, 2024

  • CVE-2024-34754
    21Monitor

    WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    a wp life · contact form widgetJun 3, 2024

  • CVE-2023-46784
    32Monitor

    WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    room 34 creative services, llc · ics calendarMay 17, 2024

  • CVE-2024-33924
    28Monitor

    WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    realtyna · realtyna organic idx pluginMay 3, 2024

  • CVE-2024-32134
    30Monitor

    WordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    nasirahmed · forms to zapier, integromat, ifttt, workato, automate.io, elastic.io, built.io, apiant, webhookApr 15, 2024

  • CVE-2024-32132
    30Monitor

    WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    codeboxr team · cbx bookmark & favoriteApr 15, 2024

  • CVE-2023-52144
    22Monitor

    WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability

    MediumCVSS 5.5No exploitEPSS 0%

    rextheme · product feed managerApr 15, 2024

  • CVE-2024-31356
    30Monitor

    WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    solwin infotech · user activity logApr 10, 2024

  • CVE-2024-31260
    28Monitor

    WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    wisdmlabs · edwiser bridgeApr 7, 2024

  • CVE-2024-31116
    28Monitor

    WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    10web · map builder for google mapsMar 31, 2024

  • CVE-2024-30523
    21Monitor

    WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    paid memberships pro · paid memberships pro – mailchimp add onMar 31, 2024

  • CVE-2024-30478
    28Monitor

    WordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    rocksolidplugins · bulletinMar 29, 2024

  • CVE-2024-22301
    30Monitor

    WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    eduva · albo pretorio onlineJan 24, 2024

  • CVE-2023-52142
    35Monitor

    WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    coolplugins · events shortcodes for the events calendarJan 8, 2024

  • CVE-2023-52133
    35Monitor

    WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    whiletrue · most and least read posts widgetDec 31, 2023

  • CVE-2023-52132
    28Monitor

    WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 0%

    wpadminify · wp adminifyDec 31, 2023

  • CVE-2023-52131
    28Monitor

    WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 0%

    wpzinc · page generatorDec 31, 2023