← All credits
Skalucy | Patchstack Bug Bounty Program
155 vulnerability records and advisories credit this contributor.
CVE-2025-67930
WordPress eHive Search plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67911
WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability
CVE-2025-68872
WordPress Eli's WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68851
WordPress Okay Toolkit plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68840
WordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27371
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-22357
WordPress Link Whisper Free plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22356
WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
CVE-2026-22355
WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability
CVE-2025-69392
WordPress iMoney plugin <= 0.36 - Reflected Cross Site Scripting (XSS) vulnerability