GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

kai63001 | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2026-66469
WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-57739
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - SQL Injection vulnerability
CVE-2026-49112
WordPress Shared Files plugin <= 1.7.64 - Path Traversal vulnerability
CVE-2026-48874
WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability
CVE-2026-48965
WordPress XCloner plugin <= 4.8.6 - Sensitive Data Exposure vulnerability
CVE-2026-42735
WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability
CVE-2026-42747
WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability
CVE-2026-42748
WordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability