← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2026-49046
WordPress Duplicate Page and Post plugin <= 2.9.5 - SQL Injection vulnerability
CVE-2026-49059
WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability
CVE-2026-49054
WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability
CVE-2026-49047
WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability
CVE-2026-49044
WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49045
WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability
CVE-2026-42643
WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42646
WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerability
CVE-2025-47532
WordPress CoinPayments.net Payment Gateway for WooCommerce plugin <= 1.0.17 - PHP Object Injection Vulnerability
CVE-2026-40734
WordPress Categories Images plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability