← All credits
dodoh4t | Patchstack Bug Bounty Program
49 vulnerability records and advisories credit this contributor.
CVE-2026-42736
WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-42737
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability
CVE-2026-42749
WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability
CVE-2026-42751
WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42754
WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42756
WordPress QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly plugin <= 3.2.7 - Arbitrary File Deletion vulnerability
CVE-2026-42760
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability
CVE-2026-42741
WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability
CVE-2026-42742
WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability