← All credits
Dimas Maulana | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2025-26743
WordPress Advance WP Query Search Filter plugin <= 1.0.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26746
WordPress Advanced Custom Fields: Link Picker Field plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-25141
WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability
CVE-2025-25130
WordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerability
CVE-2025-25099
WordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability
CVE-2025-25092
WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-25089
WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24685
WordPress Morkva UA Shipping plugin <= 1.0.18 - Local File Inclusion vulnerability
CVE-2025-23670
WordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22508
WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability