← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-24990
WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability
CVE-2026-24632
WordPress Delay Redirects plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-0677
WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability
CVE-2025-67978
WordPress Educare plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67626
WordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability