← All credits
Jakub Herman | Patchstack Bug Bounty Program
63 vulnerability records and advisories credit this contributor.
CVE-2026-40766
WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability
CVE-2026-3075
WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability
CVE-2026-39515
WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability
CVE-2026-39503
WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability
CVE-2026-39450
WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability
CVE-2026-34892
WordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability
CVE-2026-34886
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
CVE-2026-32423
WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability
CVE-2026-32408
WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability
CVE-2026-32397
WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability