← All credits
dutafi | Patchstack Bug Bounty Program
68 vulnerability records and advisories credit this contributor.
CVE-2026-61966
WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
CVE-2026-61960
WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65515
WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66694
WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66663
WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65560
WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61961
WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28082
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65438
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57735
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability