← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-39616
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39602
WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability
CVE-2026-45217
WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability
CVE-2026-61945
WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability
CVE-2026-42654
WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability
CVE-2026-42677
WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerability
CVE-2026-57697
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CVE-2026-57378
WordPress Advanced Forms plugin <= 1.9.3.7 - Broken Access Control vulnerability
CVE-2026-57360
WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57721
WordPress ApplyOnline plugin <= 2.6.7.6 - Broken Access Control vulnerability