← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2026-81770
WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-81771
WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73393
WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-68567
WordPress Convert Pro plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28172
WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
CVE-2026-59530
WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability
CVE-2026-39508
WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39500
WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39497
WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability
CVE-2026-39483
WordPress VK All in One Expansion Unit plugin <= 9.113.3 - Cross Site Scripting (XSS) vulnerability