← All credits
Bao - BlueRock | Patchstack Bug Bounty Program
81 vulnerability records and advisories credit this contributor.
CVE-2026-78258
WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability
CVE-2026-25403
WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2026-39570
WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability
CVE-2026-39569
WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability
CVE-2026-39566
WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability
CVE-2026-39564
WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability
CVE-2026-39563
WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability
CVE-2026-39562
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability
CVE-2026-39543
WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability
CVE-2026-39535
WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability