← All credits
Abdi Pranata | Patchstack Bug Bounty Program
223 vulnerability records and advisories credit this contributor.
CVE-2025-26994
WordPress Zigaform – Price Calculator & Cost Estimation Form Builder Lite plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26989
WordPress Zigaform – Form Builder Lite plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26931
WordPress Tribulant Gallery Voting plugin <= 1.2.1 - CSRF to Stored XSS vulnerability
CVE-2025-26868
WordPress Fast Flow plugin <= 1.2.16 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26768
WordPress what3words Address Field plugin <= 4.0.15 - CSRF to Stored XSS vulnerability
CVE-2025-26759
WordPress Content Snippet Manager plugin <= 1.1.5 - CSRF to Stored XSS vulnerability
CVE-2025-26758
WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
CVE-2025-26756
WordPress Magic the Gathering Card Tooltips plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26582
WordPress TinyMCE Advanced qTranslate fix editor problems plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
CVE-2025-26580
WordPress Page/Post Specific Social Share Buttons plugin <= 2.1 - CSRF to Stored XSS vulnerability