← All credits
mcdruid | Patchstack Bug Bounty Program
40 vulnerability records and advisories credit this contributor.
CVE-2025-68897
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code Execution (RCE) vulnerability
CVE-2025-68865
WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
CVE-2025-58662
WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability
CVE-2025-52740
WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability
CVE-2025-49335
WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-62023
WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability
CVE-2025-64227
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability
CVE-2026-27366
WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability
CVE-2026-27410
WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
CVE-2026-40720
WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability