Read the docs

Muhammad Rehman

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Muhammad Rehman records in CISA KEV

No Muhammad Rehman vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-25958 CVE-2024-38724 · GHSA-v6j4-8hq4-f7g4

WordPress Contact Form 7 Summary and Print plugin <= 1.2.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0017 Published 2024-08-13 No fix listed CWE-352
TI-2025-09357 CVE-2025-10192 · GHSA-j29p-jj27-5jww

WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppe_effect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00297 Published 2025-10-03 No fix listed CWE-79
TI-2023-13649 CVE-2023-29237 · GHSA-85rv-m554-fjhh

WordPress Remove Duplicate Posts plugin <= 1.3.5 - Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Remove Duplicate Posts: from n/a through 1.3.5.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-12-09 No fix listed CWE-862
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
Open these records in search →