← All credits
Phat RiO | Patchstack Bug Bounty Program
324 vulnerability records and advisories credit this contributor.
CVE-2025-68992
WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68991
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68990
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability
CVE-2025-68982
WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability
CVE-2025-68981
WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability
CVE-2025-68980
WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerability
CVE-2025-68978
WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68977
WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69341
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2025-69336
WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability