← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-42681
WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-42733
WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42740
WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability
CVE-2026-42750
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42755
WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability
CVE-2026-42757
WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability
CVE-2026-42758
WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability
CVE-2026-42761
WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
CVE-2026-45438
WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
CVE-2026-39694
WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability