← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2026-32405
WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability
CVE-2026-32391
WordPress SmartFix theme < 1.2.4 - Broken Access Control vulnerability
CVE-2026-32390
WordPress Nanosoft theme < 1.3.2 - Broken Access Control vulnerability
CVE-2026-32388
WordPress GLB theme <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-32355
WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability
CVE-2026-28138
WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
CVE-2026-27407
WordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerability
CVE-2026-27396
WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability
CVE-2026-27390
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability
CVE-2026-27389
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability