← All credits
ch4r0n | Patchstack Bug Bounty Program
79 vulnerability records and advisories credit this contributor.
CVE-2025-49403
WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability
CVE-2026-39480
WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability
CVE-2025-60247
WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2025-60244
WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability
CVE-2025-60243
WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability
CVE-2025-58201
WordPress AfterShip Tracking Plugin <= 1.17.17 - Broken Access Control Vulnerability
CVE-2025-57939
WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability
CVE-2025-57931
WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-53295
WordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability
CVE-2025-53291
WordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability