GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Phat RiO | Patchstack Bug Bounty Program

324 vulnerability records and advisories credit this contributor.

CVE-2026-84834
WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
CVE-2026-24370
WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28191
WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability
CVE-2026-24369
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-24368
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-27330
WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability
CVE-2025-46252
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.2 - SQL Injection vulnerability
CVE-2026-66658
WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
CVE-2026-27380
WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability
CVE-2026-66477
WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability