← All credits
Muhamad Agil Fachrian | Patchstack Bug Bounty Program
50 vulnerability records and advisories credit this contributor.
CVE-2025-25093
WordPress Child Themes Helper plugin <= 2.2.7 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-24741
WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability
CVE-2025-24740
WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability
CVE-2025-24551
WordPress Radio Buttons and Swatches for WooCommerce plugin <= 1.1.20 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24539
WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24536
WordPress ThriveDesk plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24535
WordPress SKT Donation plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23699
WordPress Event Countdown Timer Plugin by TechMix plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23690
WordPress Book a Place plugin <= 0.7.1 - CSRF to Stored XSS vulnerability
CVE-2025-23457
WordPress Shipdeo plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability