← All credits
Bao - BlueRock | Patchstack Bug Bounty Program
81 vulnerability records and advisories credit this contributor.
CVE-2025-58841
WordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability
CVE-2025-58840
WordPress Custom Team Manager Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57933
WordPress Piotnet Forms Plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-69364
WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability
CVE-2025-69361
WordPress Post Expirator plugin <= 4.9.3 - Broken Access Control vulnerability
CVE-2026-78258
WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability
CVE-2026-25403
WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2026-39570
WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability
CVE-2026-39569
WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability
CVE-2026-39566
WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability