Supakiad S. (m3ez) | Patchstack Bug Bounty Program

WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability

WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability

WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability

WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability

WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability

WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability