GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Legion Hunter | Patchstack Bug Bounty Program

221 vulnerability records and advisories credit this contributor.

CVE-2026-66464
WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability
CVE-2026-66463
WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability
CVE-2026-65541
WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability
CVE-2026-39652
WordPress iGMS Direct Booking plugin <= 1.3 - Broken Access Control vulnerability
CVE-2026-39649
WordPress Royale News theme <= 2.2.4 - Broken Access Control vulnerability
CVE-2026-39648
WordPress Cream Blog theme <= 2.1.7 - Broken Access Control vulnerability
CVE-2026-39610
WordPress WpXmas-Snow plugin <= 1.1 - Broken Access Control vulnerability
CVE-2026-39609
WordPress Wava Payment plugin <= 0.3.7 - Broken Access Control vulnerability
CVE-2026-39608
WordPress iPOSpays Gateways WC plugin <= 1.3.7 - Broken Access Control vulnerability
CVE-2026-39606
WordPress BizReview plugin <= 1.5.13 - Broken Access Control vulnerability