← All credits
Muhamad Agil Fachrian | Patchstack Bug Bounty Program
50 vulnerability records and advisories credit this contributor.
CVE-2025-23453
WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22784
WordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-22736
WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability
CVE-2025-22341
WordPress Hide Login+ plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56264
WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability
CVE-2024-56206
WordPress gap-hub-user-role. plugin <= 3.4.1 - CSRF to Broken Authentication vulnerability
CVE-2024-56033
WordPress FAQs plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56032
WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56022
WordPress Preloader by WordPress Monsters plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56013
WordPress Wovax IDX plugin <= 1.2.2 - Account Takeover vulnerability