← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-42686
WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42663
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42378
WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability
CVE-2026-39451
WordPress WP Google Review Slider plugin <= 18.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32521
WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32413
WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability
CVE-2026-32406
WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
CVE-2026-27050
WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-27044
WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability
CVE-2026-24997
WordPress Wired Impact Volunteer Management plugin <= 2.8 - Broken Access Control vulnerability