← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2026-27388
WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability
CVE-2026-27386
WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability
CVE-2026-27385
WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27374
WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability
CVE-2026-27363
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27362
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-27361
WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability
CVE-2026-27354
WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27333
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerability
CVE-2026-27065
WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability