← All credits
mcdruid | Patchstack Bug Bounty Program
40 vulnerability records and advisories credit this contributor.
CVE-2026-48838
WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32358
WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability
CVE-2026-28135
WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability
CVE-2026-27984
WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability
CVE-2026-25345
WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability
CVE-2026-22333
WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability
CVE-2025-69323
WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69319
WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability
CVE-2025-68898
WordPress Synergy Project Manager plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68864
WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability