← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2026-27053
WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability
CVE-2026-27052
WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
CVE-2026-27045
WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability
CVE-2026-27040
WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability
CVE-2026-27039
WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability
CVE-2026-25473
WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability
CVE-2026-25449
WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability
CVE-2026-25415
WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability
CVE-2026-25414
WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability
CVE-2026-25413
WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability