← All credits
Arif Shaikh | Patchstack Bug Bounty Program
12 vulnerability records and advisories credit this contributor.
CVE-2026-27378
WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability
CVE-2026-27345
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability
CVE-2026-24639
WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-25002
WordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability
CVE-2025-69331
WordPress Theater for WordPress plugin <= 0.19 - Broken Access Control vulnerability
CVE-2025-69093
WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability
CVE-2026-25004
WordPress CM Business Directory plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24625
WordPress File Uploads Addon for WooCommerce plugin <= 1.7.3 - Broken Access Control vulnerability
CVE-2026-24361
WordPress LearnPress – Course Review plugin <= 4.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24365
WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cross Site Request Forgery (CSRF) vulnerability