← All credits
NumeX | Patchstack Bug Bounty Program
45 vulnerability records and advisories credit this contributor.
CVE-2026-25447
WordPress Widget Wrangler plugin <= 2.3.9 - Remote Code Execution (RCE) vulnerability
CVE-2026-24987
WordPress WP System Log plugin <= 1.2.7 - Broken Access Control vulnerability
CVE-2026-24956
WordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability
CVE-2026-24950
WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24947
WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability
CVE-2026-23545
WordPress Aruba HiSpeed Cache plugin <= 3.0.4 - Broken Access Control vulnerability
CVE-2026-22448
WordPress PitchPrint plugin <= 11.1.2 - Arbitrary File Deletion vulnerability
CVE-2026-22388
WordPress Owl Carousel WP plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69014
WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-68882
WordPress Scalenut plugin <= 1.1.5 - Broken Access Control vulnerability