← All credits
Phat RiO | Patchstack Bug Bounty Program
324 vulnerability records and advisories credit this contributor.
CVE-2025-69352
WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability
CVE-2025-69341
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2025-69336
WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability
CVE-2025-68086
WordPress Reformer for Elementor plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2025-68054
WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability
CVE-2025-68053
WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability
CVE-2025-66162
WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerability
CVE-2025-60083
WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
CVE-2025-59007
WordPress TF Woo Product Grid Addon For Elementor Plugin <= 1.0.1 - Deserialization of untrusted data Vulnerability
CVE-2025-69179
WordPress Support Ticket Management System plugin <= 1.9 - Privilege Escalation vulnerability