← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2026-39482
WordPress Post Expirator plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39479
WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability
CVE-2026-39473
WordPress Simple History plugin <= 5.24.0 - Sensitive Data Exposure vulnerability
CVE-2026-39464
WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-57693
WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57669
WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability
CVE-2026-57754
WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57737
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57629
WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42649
WordPress Favicon Rotator plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability