← All credits
Joshua Chan | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2024-52402
WordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerability
CVE-2024-52398
WordPress CDI plugin <= 5.5.3 - Arbitrary File Upload vulnerability
CVE-2024-52401
WordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerability
CVE-2024-51877
WordPress SV Forms plugin <= 2.0.05 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51819
WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-51668
WordPress MyCurator Content Curation plugin <= 3.78 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49674
WordPress EKC Tournament Manager plugin <= 2.2.1 - CSRF to Arbitrary File Upload vulnerability
CVE-2024-49284
WordPress WP SendFox plugin <= 1.3.1 - Sensitive Data Exposure vulnerability
CVE-2024-49274
WordPress VOD Infomaniak plugin <= 1.5.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-48024
WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability