← All credits
Phat RiO | Patchstack Bug Bounty Program
325 vulnerability records and advisories credit this contributor.
CVE-2026-65478
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
CVE-2026-57786
WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability
CVE-2026-57787
WordPress CWS SVGicons plugin <= 1.5.5 - SQL Injection vulnerability
CVE-2026-57747
WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57746
WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability
CVE-2026-57750
WordPress ez Form Calculator Premium plugin <= 2.14.1.2 - Broken Access Control vulnerability
CVE-2026-40725
WordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability
CVE-2026-40723
WordPress Bricks Builder theme <= 2.1.4 - Broken Access Control vulnerability
CVE-2026-40721
WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
CVE-2026-39445
WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability