← All credits
NumeX | Patchstack Bug Bounty Program
45 vulnerability records and advisories credit this contributor.
CVE-2025-68500
WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-68051
WordPress Shiprocket plugin <= 2.0.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68021
WordPress ConveyThis plugin <= 269.9 - Broken Access Control vulnerability
CVE-2025-68022
WordPress Plugin BlueX for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability
CVE-2025-68014
WordPress AweBooking plugin <= 3.2.26 - Sensitive Data Exposure vulnerability
CVE-2025-67974
WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability
CVE-2025-67945
WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability
CVE-2025-67582
WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-66132
WordPress FAPI Member plugin <= 2.2.30 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-66128
WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability