← All credits
Jakub Herman | Patchstack Bug Bounty Program
63 vulnerability records and advisories credit this contributor.
CVE-2026-52698
WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
CVE-2026-54184
WordPress Clean Login plugin <= 1.15 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-49767
WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability
CVE-2026-49773
WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49110
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
CVE-2026-49056
WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerability
CVE-2026-48883
WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability
CVE-2026-42660
WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability
CVE-2026-42651
WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability
CVE-2026-42384
WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability