← All credits

AndrewN | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2026-108497

WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability

CVE-2026-110901

WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-108291

WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

CVE-2026-108484

WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109695

WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

CVE-2026-109694

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

CVE-2026-108491

WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109698

WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability