← All credits
endy | Patchstack Bug Bounty Program
15 vulnerability records and advisories credit this contributor.
CVE-2026-84753
WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
CVE-2026-57385
WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability
CVE-2026-57331
WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability
CVE-2026-57330
WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57647
WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
CVE-2026-54822
WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
CVE-2026-54812
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
CVE-2026-54814
WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
CVE-2026-48867
WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49766
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability