← All credits
dutafi | Patchstack Bug Bounty Program
67 vulnerability records and advisories credit this contributor.
CVE-2026-57427
WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57735
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57809
WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-59517
WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57716
WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability
CVE-2026-57428
WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57703
WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability
CVE-2026-57701
WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57397
WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57368
WordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerability