← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2025-63056
WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability
CVE-2025-60180
WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability
CVE-2025-60178
WordPress WP Gravity Forms HubSpot plugin <= 1.2.6 - Deserialization of untrusted data vulnerability
CVE-2025-60174
WordPress WP Gravity Forms Constant Contact plugin plugin <= 1.1.2 - Deserialization of untrusted data vulnerability
CVE-2025-60091
WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.9 - Deserialization of untrusted data vulnerability
CVE-2025-60090
WordPress WP Gravity Forms Insightly plugin <= 1.1.6 - Deserialization of untrusted data vulnerability
CVE-2025-60089
WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability
CVE-2025-60084
WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability
CVE-2025-60082
WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
CVE-2025-60081
WordPress PDF for Contact Form 7 plugin <= 6.5.0 - Deserialization of untrusted data vulnerability