← All credits
0xd4rk5id3 | Patchstack Bug Bounty Program
287 vulnerability records and advisories credit this contributor.
CVE-2025-69048
WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49951
WordPress gAppointments Plugin <= 1.14.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49947
WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49946
WordPress Auto Login After Registration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49911
WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58627
WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68869
WordPress LazyTasks plugin <= 1.2.37 - Privilege Escalation vulnerability
CVE-2025-68030
WordPress Frontis Blocks plugin <= 1.1.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-67584
WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability
CVE-2025-53283
WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability