← All credits
Peng Zhou | Patchstack Bug Bounty Program
23 vulnerability records and advisories credit this contributor.
CVE-2026-42731
WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability
CVE-2026-42739
WordPress Advanced IP Blocker plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37418
WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability
CVE-2024-31280
WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability
CVE-2024-43264
WordPress Create by Mediavine plugin <= 1.9.8 - Sensitive Data Exposure vulnerability
CVE-2024-43237
WordPress Tag Groups plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
CVE-2024-37555
WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability
CVE-2024-34813
WordPress WooCommerce Wishlist plugin <= 1.7.8 - Broken Access Control vulnerability
CVE-2024-34812
WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability
CVE-2024-32792
WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability