← All credits
Dimas Maulana | Patchstack Bug Bounty Program
81 vulnerability records and advisories credit this contributor.
CVE-2025-39383
WordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability
CVE-2025-39382
WordPress ACF: Google Font Selector plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39379
WordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-39378
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability
CVE-2025-39360
WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability
CVE-2025-39359
WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2025-32921
WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-32639
WordPress Affiliate Links plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32614
WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability
CVE-2025-32526
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability