← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2025-52812
WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability
CVE-2025-52807
WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability
CVE-2025-49511
WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability
CVE-2025-49444
WordPress Reformer for Elementor plugin <= 1.0.5 - Arbitrary File Upload Vulnerability
CVE-2025-49418
WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-49417
WordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability
CVE-2025-49387
WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability
CVE-2025-49314
WordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49313
WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
CVE-2025-49261
WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability