Jakub Herman | Patchstack Bug Bounty Program

WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability

WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability

WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability

WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability

WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability

WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability

WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability

WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability