← All credits
Phat RiO | Patchstack Bug Bounty Program
326 vulnerability records and advisories credit this contributor.
CVE-2026-25357
WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability
CVE-2026-25340
WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability
CVE-2026-25334
WordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerability
CVE-2026-24989
WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability
CVE-2026-24972
WordPress Elated Listing plugin <= 1.4 - Broken Access Control vulnerability
CVE-2026-24971
WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability
CVE-2026-24970
WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability
CVE-2026-24969
WordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability
CVE-2026-24954
WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability
CVE-2026-24637
WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability