← All credits
savphill | Patchstack Bug Bounty Program
38 vulnerability records and advisories credit this contributor.
CVE-2025-32118
WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.14 - Remote Code Execution (RCE) vulnerability
CVE-2025-26762
WordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24746
WordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24668
WordPress PPOM for WooCommerce plugin <= 33.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24651
WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
CVE-2025-24644
WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24542
WordPress Icegram Engage plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22825
WordPress Flexible PDF Coupons plugin < 1.10.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-22802
WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22773
WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability